6141 matches found
MAL-2026-651 Malicious code in cat-admin-tool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 34286533490c9ad41743b1eea6659d9c4fd3e62d1a830658b90840f3c49a6c8c Obfuscated code is used to hide exfiltration of basic data hostname, etc.. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but...
crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...
BIT-DISCOURSE-2025-68662 FinalDestination hostname matching allows SSRF protection bypass
Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, a hostname validation issue in FinalDestination could allow bypassing SSRF protections under certain conditions. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and...
Alibaba Cloud Linux 3 : 0024: grafana (ALINUX3-SA-2026:0024)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0024 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-61729: Within HostnameError.Error, when...
MiracleLinux 8 : php:8.2 (AXSA:2026-124:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-124:01 advisory. php: pgsql extension does not check for errors during escaping CVE-2025-1735 php: NULL Pointer Dereference in PHP SOAP Extension via Large XML...
CVE-2026-24902
TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In tcpforwarder.rs, SSRF protection for allowprivatenetworkconnections = false was only applied in the TcpDestination::HostNamepeer path. The...
CLEANSTART-2026-YG94604 Within HostnameError
Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-QZ70444 Within HostnameError
Multiple security vulnerabilities affect the opentofu-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-LZ10721 Within HostnameError
Multiple security vulnerabilities affect the druid-exporter-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-NA36743 Within HostnameError
Security vulnerability affects the gitlab-pages-fips package. Within HostnameError...
CLEANSTART-2026-GJ12884 Within HostnameError
Multiple security vulnerabilities affect the kaniko-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-DN37053 Within HostnameError
Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-SO17846 Within HostnameError
Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-XO49545 Within HostnameError
Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-UI65993 Within HostnameError
Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-ZM84646 Within HostnameError
Multiple security vulnerabilities affect the stakater-reloader package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-UM63521 Within HostnameError
Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-QV26039 Within HostnameError
Security vulnerability affects the argo-workflows package. Within HostnameError...