10221 matches found
Node.js 26.5.0 HTTPS Agent PFX Client Identity Collision
Node.js versions 22.x, 24.x, and 26.x contain an HTTPS Agent connection reuse flaw that can reuse mutual TLS client identities across requests configured with different PFX client certificates. The supplied tool performs offline comparison of operator-reported versions against fixed releases...
Node.js 26.5.0 HTTPS Agent PFX Client Identity Collision
Node.js versions 22.x, 24.x, and 26.x contain an HTTPS Agent PFX object-array key collision that can reuse mTLS client identities across requests configured with different client certificates...
Node.js 26.5.0 HTTPS Agent TLS Session Reuse Hostname Verification Bypass
Node.js versions 22.x, 24.x, and 26.x prior to 22.23.2, 24.18.1, and 26.5.1 respectively contain an HTTPS Agent TLS session reuse issue that can skip hostname verification across identity policies. This advisory provides research and an implementation checklist; it contains no checker...
Exploit for CVE-2026-58040
node-cve-2026-58040-check Standalone...
Exploit for Improper Authentication in Nodejs Node.Js
node-cve-2026-56850-check Standalon...
K000163881: Golang vulnerabilities CVE-2026-46597, CVE-2026-46600, and CVE-2026-56852
Security Advisory Description CVE-2026-46597 An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message...
GHSA-JR5W-W6X2-84P9 Electron: Mitigation for compromised eMudhra intermediate certificates
Impact A set of eMudhra intermediate certificates were compromised and are being blocked by browsers and other TLS clients. This Electron update adds the same block to both Chromium networking and Node.js tls, https and fetch. On earlier versions, an attacker holding a certificate issued through...
Electron: Mitigation for compromised eMudhra intermediate certificates
Impact A set of eMudhra intermediate certificates were compromised and are being blocked by browsers and other TLS clients. This Electron update adds the same block to both Chromium networking and Node.js tls, https and fetch. On earlier versions, an attacker holding a certificate issued through...
CVE-2026-115570
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...
CVE-2026-115570
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...
EUVD-2026-109120
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...
CVE-2026-115570 Electron: Mitigation for compromised eMudhra intermediate certificates
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...
CVE-2026-115570
The Electron framework, used for building cross-platform desktop applications, is vulnerable in versions prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6 . The root cause is the failure to block compromised eMudhra intermediate certificates across Chromium networking , Node.js tls , Node.js h...
CVE-2026-115570 Electron: Mitigation for compromised eMudhra intermediate certificates
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...
CVE-2026-115570 Electron: Mitigation for compromised eMudhra intermediate certificates
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...
R_EXPLOIT
R-Exploit — Authorized Web Security Audit + Local Lab Open-...
CLEANSTART-2026-WH89165 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
MiracleLinux 9 : python3.12-urllib3-1.26.19-3.el9_8.2 (AXSA:2026-2125:05)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2125:05 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS...
Fedora 44 : bind9-next (2026-87d221ec8c)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-87d221ec8c advisory. Update to 9.21.26 rhbz2489832 Security Fixes: - Prevent excessive CPU use validating crafted DNSSEC responses. CVE-2026-19668 - Require a TSIG on...
PT-2026-122200
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...