DEBIAN-CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

UBUNTU-CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

EUVD-2026-88055

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The issue is located within the Internationalized Domain Name Handler component, specifically in the opendmarc_policy_query_dmarc function of the libopendmarc/opendmarc_policy.c library. An encoding error can be trig...

CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

PT-2026-102335

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.6 @grpc/grpc-js versions prior to 1.14.5 Description When an application method handler throws an uncaught error, the server includes the error message in the status message sent to the client. This can lea...

CVE-2026-100891: Encoding Error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-101915: Server-generated Error Message Containing Sensitive Information

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught error, the server includes its error message in the status message sent to the client. The thrown error message is...

ROS-20260928-73-0047

The vulnerability of the xfrmstatedeletetunnel function in the net/xfrm/xfrmstate.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-18825: Origin Validation Error

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-4220-Exploit

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Эксплойт Эксплойт для CVE-2023-4220 использует ошибку программирования в LMS Chamilo, которая позволяет загрузить файл на сервер без каких-либо ограничений. Этот эксплойт был написан для нашей машины Easy permX с HTB, с любовью для CTF-игрок...

php_filter_chain_oracle_poc

phpfilterchainoraclepoc Обзор Команда Synacktiv опубликовала подробное исследование PHP Filter Chains: File Read from Error-Based Oracle , первоначально представленное на DownUnder CTF 2022. Это исследование было основано на задаче от @hashkitten, где участникам нужно было извлечь файл /flag из...

IntelligentProcessLifecycle

IntelligentProcessLifecycle Интеллектуальный жизненный цикл процессов активных киберзащитников Описание Этот репозиторий GitHub содержит файлы постера, связанные с категориями ложных срабатываний и ошибок в службах операционной безопасности. Цель — определить открытый стандарт отчетности для...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security Free, Pro, и Pro Multisite 9.0.0 – 9.1.1.1 — Обход аутентификации 📖 Описание Этот скрипт эксплуатирует уязвимость в плагине Really Simple Security версии 9.0.0 – 9.1.1.1 для WordPress. Ошибка позволяет обходить аутентификацию из-за неправильной...

cs-get-last-error

cs-get-last-error Получение сообщений об ошибках из кодов GetLastError непосредственно внутри клиента Cobalt Strike без помощи поиска Google, net helpmsg или Microsoft Error Lookup Tool. Сообщения об ошибках включены в aggressor-скрипт, и взаимодействие с биконом не требуется. Aggressor-скрипт...

CVE-2025-67733

Инъекция протокола RESP PoC Доказательство концепции, демонстрирующее уязвимость инъекции протокола RESP через сообщения об ошибках Lua-скриптов в Valkey/Redis. Файлы backend.py Flask-бэкенд, имитирующий веб-приложение с общим подключением к Valkey пул соединений. Эндпоинты: Метод| Эндпоинт|...