CVE-2026-15927

CVE-2026-15927: Red Hat Quay repository-level mirror feature allows SSRF via external_reference in POST/PUT to endpoints/api/mirror.py, not applying the stricter validate_external_registry_url() used by organization-level mirrors. This enables a repository administrator to craft a hostname that m...

EUVD-2020-18519

Malware in sbrugna...

CVE-2020-25887

Buffer overflow in mgresolvefromhostsfile in Mongoose 6.18, when reading from a crafted hosts file...

Buffer overflow

Buffer overflow in mgresolvefromhostsfile in Mongoose 6.18, when reading from a crafted hosts file...

PT-2023-11742 · Mongoose · Mongoose

Name of the Vulnerable Software and Affected Versions: Mongoose version 6.18 Description: The issue is a buffer overflow in the mg resolve from hosts file function when reading from a crafted hosts file. This can occur in Mongoose 6.18. Recommendations: For Mongoose version 6.18, consider updatin...

CVE-2020-25887

Buffer overflow in mgresolvefromhostsfile in Mongoose 6.18, when reading from a crafted hosts file...

CVE-2020-25887

Buffer overflow in mgresolvefromhostsfile in Mongoose 6.18, when reading from a crafted hosts file...

CVE-2020-25887

CVE-2020-25887 affects Cesanta Mongoose (v6.18) with a buffer overflow in the function mg_resolve_from_hosts_file when parsing a crafted hosts file. The issue is rooted in that host-resolution path, leading to potential memory corruption. The CVSS 3.1 base score is 8.8 (HIGH) with network attack ...