CVE-2026-113862

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

EUVD-2026-122077

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-88212

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over an adjacent network...

EUVD-2026-121967

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

CVE-2026-113862

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

SysWhispers2

SysWhispers2 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference Between SysWhispers 1 and 2 The usage is almost identical to...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

CVE-2026-125756

postal-mime before 4.2.1 contains a parser differential vulnerability in its address parser that truncates the domain at folding whitespace or comments preceding a dot. Remote attackers can craft From headers that pass SPF/DKIM/DMARC alignment for their own subdomain while PostalMime.parse report...

CVE-2026-125755

Nodemailer 3.0.0 before 10.4.1 contains an address parsing flaw in addressparser that truncates domains at folding whitespace or comments before a dot, allowing attackers to bypass recipient domain restrictions. Attackers can submit crafted to, cc, bcc or replyTo addresses that pass RFC 5322 doma...

npm: node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

Anonymous Write/Call Bypass via Unbound DefaultRolePermissions vulnerability discovered by ? in WordPress npm node-opcua-address-space versions = 2.42.0, 2.180.0...

EUVD-2026-121239

postal-mime before 4.2.1 contains a parser differential vulnerability in its address parser that truncates the domain at folding whitespace or comments preceding a dot. Remote attackers can craft From headers that pass SPF/DKIM/DMARC alignment for their own subdomain while PostalMime.parse report...

CVE-2026-125755

Nodemailer versions 3.0.0 before 10.4.1 are vulnerable to a recipient allow-list bypass due to an address parsing flaw in the addressparser component. The flaw causes the parser to truncate domains when encountering folding whitespace or comments before a dot. This allows an attacker to submit cr...

CVE-2026-125756 postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation

postal-mime before 4.2.1 contains a parser differential vulnerability in its address parser that truncates the domain at folding whitespace or comments preceding a dot. Remote attackers can craft From headers that pass SPF/DKIM/DMARC alignment for their own subdomain while PostalMime.parse report...

EUVD-2026-121238

Nodemailer 3.0.0 before 10.4.1 contains an address parsing flaw in addressparser that truncates domains at folding whitespace or comments before a dot, allowing attackers to bypass recipient domain restrictions. Attackers can submit crafted to, cc, bcc or replyTo addresses that pass RFC 5322 doma...

CVE-2026-125756

The postal-mime library (versions before 4.2.1 ) contains a parser differential vulnerability within its address parser. The issue stems from the parser truncating the domain when encountering folding whitespace or comments preceding a dot. This allows remote attackers to craft From headers that ...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

Information Disclosure

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

CVE-2026-124936

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160...

CVE-2026-124930

Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160...

CVE-2026-124936

The Firefox browser is affected by a spoofing issue within the Address Bar component . This vulnerability was addressed and fixed in Firefox 160 . No specific root causes, exploit details, or exploit links are provided in the documents.