CVE-2026-106069

A flaw in the Node.js TLS hostname verification allows an attacker to bypass security by presenting a certificate for an endpoint that does not belong to them. The tls.checkServerIdentity() function incorrectly normalizes non-canonical IPv4 literals with leading zeros (e.g., 0127.0.0.1) as octal,...

CVE-2026-106072

A flaw in Node.js TLS hostname verification allows certificates with only a DNS SAN to authenticate an IP endpoint when using non-canonical IPv4 spellings (e.g., 0177.0.0.1, 0x7f.0.0.1, 2130706433, or 127.1). The tls.checkServerIdentity() function fails to classify these as IP addresses, normaliz...

CVE-2026-105483

A flaw in Node.js TLS hostname verification allows an attacker to bypass certificate validation by using non-ASCII fullwidth digits (e.g., １２７.０.０.１) to represent an IP address. The tls.checkServerIdentity() function fails to recognize these as IP addresses, instead matching them against DNS name...

EUVD-2026-109100

A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits １２７.0.0.1. tls.checkServerIdentity did not recognize such hosts as IP...

EUVD-2026-109105

A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve functions and dns.reverse. This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup and the net/tls host options. Because the name is passed to c-ares as a C strin...

EUVD-2026-109107

A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as 0127.0.0.1. tls.checkServerIdentity normalizes the host...

CVE-2026-106069

A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as 0127.0.0.1. tls.checkServerIdentity normalizes the host...

CVE-2026-106072

A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as 0177.0.0.1, 0x7f.0.0.1, 2130706433 or 127.1. tls.checkServerIdentity did not classify these hosts as IP...

CVE-2026-105482

A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve functions and dns.reverse. This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup and the net/tls host options. Because the name is passed to c-ares as a C strin...

CVE-2026-105483

A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits １２７.0.0.1. tls.checkServerIdentity did not recognize such hosts as IP...

CVE-2026-105483

A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits １２７.0.0.1. tls.checkServerIdentity did not recognize such hosts as IP...

CVE-2026-106069

A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as 0127.0.0.1. tls.checkServerIdentity normalizes the host...

sslScrape

sslScrape SSLScrape | A scanning tool for scaping hostnames from SSL certificates. Written by Peter Kim and @bbuerhaus . / ///| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Usage | python sslScrape.py CIDR Range E.X | python sslScrape.py 10.100.100.0/24...

CVE-2026-93630

A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to bypass the restriction on forms that target the Zimbra host. DefangFilter and the OWASP ActionAttributePolicy compare the form-action hostname with the...

CVE-2026-93630

The Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.21 are vulnerable to a hostname canonicalization issue in their email HTML sanitizers. The DefangFilter and OWASP ActionAttributePolicy components fail to properly handle percent-encoded hostnames, comparing them against the request h...

EUVD-2026-108971

A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to bypass the restriction on forms that target the Zimbra host. DefangFilter and the OWASP ActionAttributePolicy compare the form-action hostname with the...

CVE-2026-115751

The Agentfront mcp-from-openapi package (versions 2.2.0 through 2.8.x ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is an incomplete list of disallowed inputs, where the ssrf.blockedHosts denylist can be bypassed using trailing-dot hostnames . An attacker who controls a...

CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

CVE-2022-46169_poc

CVE-2022-46169 unauthenticated remote code execution Description Authentication Bypass: a hostname-based authorization check is not implemented safely for most installations of Cacti Command Injection: unsanitized user input is propagated to a string used to execute an external command Demo POC...

uncle-spufus

█░░█ █▀▀▄ █▀▀ █░░ █▀▀ █▀▀ █▀▀█ █░░█ █▀▀ █░░█ █▀▀ v1.6" █░░█ █░░█ █░░ █░░ █▀▀ ▀▀█ █░░█ █░░█ █▀▀ █░░█ ▀▀█" ░▀▀▀ ▀░░▀ ▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀ █▀▀▀ ░▀▀▀ ▀░░ ░▀▀▀ ▀▀▀" Uncle Spufus v1.6 A tool that automates MAC address and hostname spoofing What is Uncle Spufus My long story I remember back in the days when ...