domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit

This repository does not have a README...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

CVE-2026-108014

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...

CVE-2026-108014 eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...

CVE-2026-108014

The HCL Domino Server is impacted by a vulnerability arising from the compromise of private keys for eight eMudhra intermediate CA certificates . This breach undermines the trust of certificates used for outbound network requests. An unauthenticated network attacker could exploit this by spoofing...

EUVD-2026-111100

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...

PT-2026-126677

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...

HCL Domino Server encryption issue vulnerability

Versions 2.0.2 FP8 and earlier, 14.0 FP5 and earlier, version 14.5, and 14.5.1 FP1 and earlier of HCL Domino Server contain an encryption vulnerability. This vulnerability arises from the leakage of private keys for eight eMudhra intermediate CA certificates, affecting certificate trust for...

CLSA-2026-1792758025 TuxCare security update for domino (6 CVEs)

TuxCare rebuilt domino to address 6 CVEs. Fixed in 2.1.7-tuxcare.1...

CVE-2026-101895

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

domi-owned

Domi-Owned Resumen Domi-Owned es una herramienta utilizada para comprometer servidores IBM/Lotus Domino. Probado en IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0 y 9.0.1 ejecutándose en Windows y Linux. Requisitos Domi-Owned usa Python 3, el cual puede instalarse a través del gestor de paquetes de su...

Security Bulletin: Vulnerabilities reported in platform-server-19.2.22.tgz are addressed in APIM11.1

Summary Vulnerabilities reported in platform-server-19.2.22.tgz are addressed in APIM11.1 Vulnerability Details CVEID:CVE-2026-69149 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27,...

GHSA-F67J-2JQW-JPQ7 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

A Denial of Service DoS vulnerability exists in @angular/platform-server's DOM emulation parser domino. When processing untrusted user input containing an incomplete DOCTYPE declaration ending with whitespace before EOF such as , and keyword matching advance nextchar, the EOF branch case -1: // E...

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

A Denial of Service DoS vulnerability exists in @angular/platform-server's DOM emulation parser domino. When processing untrusted user input containing an incomplete DOCTYPE declaration ending with whitespace before EOF such as , and keyword matching advance nextchar, the EOF branch case -1: // E...

Improper Encoding or Escaping of Output

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the bundled domino dependency, which is used for server-side DOM emulation during Angular Universal rendering. An...

PT-2026-102429

Name of the Vulnerable Software and Affected Versions @angular/platform-server affected versions not specified Description A Denial of Service DoS issue exists in the DOM emulation parser domino used by @angular/platform-server for Server-Side Rendering SSR. When the parser processes untrusted HT...

Improper Encoding or Escaping of Output

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the domino dependency used for server-side rendering, where a vulnerability in the underlying DOM implementation...

CVE-2026-88060

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88060

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...