CVE-2011-5237

PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2010-1590

Cross-site scripting XSS vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname aka the REMOTEHOST variable, related to the CookielessGenerateFilename an...

CVE-2016-10932

An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted...

CVE-2002-2198

Buffer overflow in ZMailer before 2.99.511 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper handling of inbound network traffic with hostname label. An attacker can cause a denial of service by sending requests with a large number of unique hostnames that may...

Security update for openssh

This update for openssh fixes the following issues: Security issues fixed: CVE-2025-32728: Fixed a logic error in DisableForwarding option bsc1241012 Other bugs fixed: Allow KEX hashes greater than 256 bits bsc1241045 Fixed hostname being left out of the audit output bsc1228634 Fixed failures wit...

[SECURITY] [DLA 4169-1] dropbear security update

Debian LTS Advisory DLA-4169-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 17, 2025 https://wiki.debian.org/LTS Package : dropbear Version : 2020.81-3+deb11u3 CVE ID : CVE-2025-47203 Marcin Nowak discovered that dbclient1 hostname arguments with a comma for...

Updated dropbear packages fix security vulnerability

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...

MGASA-2025-0158 Updated dropbear packages fix security vulnerability

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...

GHSA-CP9R-G575-XC5F Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

Improper Input Validation

Overview io.jenkins.plugins:dingding-notifications is a Dingtalk for jenkins. Affected versions of this package are vulnerable to Improper Input Validation due to the unconditional disabling of SSL/TLS certificate and hostname validation for connections. An attacker can intercept and manipulate...

Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

SUSE-SU-2025:1548-1 Security update for rabbitmq-server313

This update for rabbitmq-server313 fixes the following issues: - CVE-2025-30219: incorrectly escaped virtual hostname present in error message could lead to XSS attack. bsc1240071 Non-security fixes: - Require rabbitmq-server313-plugins rather then rabbitmq-server-plugins. bsc1231656, bsc1234763...

Alibaba Cloud Linux 3 : 0185: libuv (ALINUX3-SA-2024:0185)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0185 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-24806: libuv is a multi-platform support...

Jenkins plugin DingTalk 输入验证错误漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

Improper Certificate Validation

JRuby-OpenSSL is vulnerable to Improper Certificate Validation. The vulnerability is due to missing hostname verification due to failure to ensure that the hostname in the SSL certificate matches the intended connection target, allowing man-in-the-middle attacks with a valid certificate for a...

CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

CVE-2025-31218

CVE-2025-31218 affects macOS Sequoia 15.5 and earlier where an app could observe hostnames of new network connections via the NetworkExtension path. The issue was addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.5. Reported impact: local attacker may observe hostnames; C...

Malicious code in frau-hoster (npm)

This packages collect system information and attempt to send it to remote servers, details include hostname, OS, IP address, username and current working directory. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in @skip-partner/i18n (npm)

This package is attempting to send system information, like hostname, user, current working directory and user id to an external server --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 980936be9121e5c676851d9936d40ab77cc3e1f8be85e93a7bc081dd6c47dd9c Any computer that...