singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

SummaryThe Glances XML-RPC server glances -s, implemented in glances/server.py does not validate the HTTP Host header, leaving it vulnerable to DNS rebinding attacks. CVE-2026-32632 patched in 4.5.2 added TrustedHostMiddleware to the REST/WebUI server; the MCP server has had equivalent protection...

CVE-2026-42559

RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport crates/rmcp/src/transport/streamablehttpserver/ did not validate the incoming Host header. This allowed a malicious public website, via a DNS rebinding attack, to...

EUVD-2018-0100

Malware in sbrugna...

EUVD-2018-3355

Malware in sbrugna...

EUVD-2007-5253

Malware in sbrugna...

EUVD-2021-16073

Malware in sbrugna...

EUVD-2019-6313

Malware in sbrugna...

EUVD-2021-0816

Malware in sbrugna...

EUVD-2016-0007

Malware in sbrugna...

EUVD-2020-19485

Malware in sbrugna...

EUVD-2019-10883

Malware in sbrugna...

EUVD-2007-5254

Malware in sbrugna...

EUVD-2021-10017

Malware in sbrugna...

EUVD-2023-56908

Malicious code in bioql PyPI...

EUVD-2023-1043

Malicious code in bioql PyPI...

EUVD-2025-14755

Malicious code in bioql PyPI...

EUVD-2022-7411

Malicious code in bioql PyPI...

PT-2025-24560 · Caido · Caido

Name of the Vulnerable Software and Affected Versions: Caido versions prior to 0.48.0 Description: Caido is a web security auditing toolkit that lacks protection for DNS rebinding, allowing it to be loaded on an attacker-controlled domain. This enables a malicious website to hijack the...

CVE-2023-26492

Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery SSRF when importing a file from a remote web server POST to /files/import. An attacker can bypass the security controls by performing a DNS rebinding attack and...