CVE-2026-25946

The Gitea platform contains an unauthenticated Server-Side Request Forgery (SSRF) vulnerability within its OpenID authentication functionality. The root cause is located in the SignInOpenID() function of the routers/web/auth/openid.go file, where the application accepts a user-supplied openid_url...

EUVD-2026-101279

When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses. An unauthenticated remote attacker can cause the server to contact loopback or private-network HTTP services. This can...

CLDAP Analyzer with ASN.1 BER Encoding and Basic TLV Response Parser

This Python script implements a CLDAP Connectionless LDAP analyzer that builds and sends LDAP CLDAP discovery requests and parses responses using ASN.1 BER encoding and a basic TLV parser. It constructs a structured LDAP search request including DnsDomain, User, and NtVer filters, sends it over U...

libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion

Summary The rendezvous server stores pagination cookies without bounds. An unauthenticated peer can repeatedly issue DISCOVER requests and force unbounded memory growth. Details Pagination state is stored in: rs HashMap On Message::Discover: remote peer → DISCOVER → handlerequest →...

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2018-21481)

Cisco Wireless LAN Controller WLC Software is a suite of software for configuring and managing WLCs Wireless LAN Controllers from Cisco.Control and Provisioning of Wireless Access Points CAPWAP is one of the wireless access point control and provisioning components. CAPWAP is one of the wireless...