pritunl-CVE-2020-25200

CVE-2020-25200 Pritunl VPNサーバ - 影響を受けるバージョン: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25では、/auth/sessionへのログイン試行を連続して行うことで、攻撃者が有効なVPNユーザー名を列挙することが可能です。最初はサーバーはエラー401を返します。しかし、ユーザー名が有効な場合、20回のログイン試行後にサーバーはエラー400を返し始めます。無効なユーザー名では、永久にエラー401が返され続けます。...

CVE-2025-66417-POC

CVE-2025-66417 POC CVE-2025-66417 POST /front/inventory.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate, br Accept: text/html Connection: keep-alive Content-Type: text/xml Content-Length: 429 getparams...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

CVE-2026-100891

A flaw was found in OpenDMARC. An encoding error in the Internationalized Domain Name IDN handler within the opendmarcpolicyquerydmarc function can cause domain name queries to fail or process incorrectly. A remote attacker could exploit this vulnerability by submitting specially crafted domain...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

DEBIAN-CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

UBUNTU-CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The issue is located within the Internationalized Domain Name Handler component, specifically in the opendmarc_policy_query_dmarc function of the libopendmarc/opendmarc_policy.c library. An encoding error can be trig...

CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

EUVD-2026-88055

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

PT-2026-102335

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.6 @grpc/grpc-js versions prior to 1.14.5 Description When an application method handler throws an uncaught error, the server includes the error message in the status message sent to the client. This can lea...

PT-2026-99738

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description An issue exists in the Internationalized Domain Name Handler component within the opendmarc policy query dmarc function located in the libopendmarc/opendmarc policy.c library. A remote attacker can...

CVE-2026-101915: Server-generated Error Message Containing Sensitive Information

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught error, the server includes its error message in the status message sent to the client. The thrown error message is...

CVE-2026-100891: Encoding Error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...