93 matches found
CVE-2000-0649
CVE-2000-0649 CVE-2000-0649 は、サーバの内部IPアドレスを漏洩させる可能性がある低リスクの脆弱性です。公式の詳細はこちら: Rapid7 CVE NIST この特定の脆弱性は、現在のNGINXや一部のApacheの設定にも影響を与えるようであるため、私にとって興味深いものとなりました。このツールは指定されたIPまたはドメインに対して脆弱性をテストし、他のスクリプトと組み合わせて使用できるように出力を意図的に軽量にしています。正常に動作すると、次のようになります: それ以外の場合は、出力はありません。NGINXでは、/etc/nginx/nginx.conf...
MAL-2026-17437 Malicious code in @bluewin/utils (npm)
@bluewin/utils is a dependency-confusion package: it describes itself as a "PoC package for dependency confusion testing" and claims the @bluewin scope, so a build that resolves that scope from the public registry runs its code instead of the intended private package. Its postinstall script runs...
Remote-Integer-Overflow-Vulnerability
Nginx : リモート整数オーバーフロー脆弱性 このリポジトリは、古いながらも現存するNginxの脆弱性「Remote Integer Overflow Vulnerability CVE-2017-7529」について扱います。この脆弱性は古いNginxサーバー（1.13）を対象としています（Nginx 1.12は例外）。 セットアップ : sysライブラリとrequestsライブラリをダウンロードします。 osライブラリも用意しておくと良いでしょう。 悪用可能な脆弱性には以下が含まれます： - 1 Reading Sensitive Headers during an Interce...
CVE-2026-76203
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...
CVE-2026-76203 CSS sanitizer bypass in Pentestify report themes allows forced outbound requests
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...
EUVD-2026-62416
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...
EUVD-2026-45194
Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...
CVE-2026-35142
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...
CVE-2026-42447
jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends arches and perArchCount values derived from .so file path components inside an APK into an HTML panel without escaping. A malicious APK wit...
CVE-2026-33357
CVE-2026-33357 affects Meari client applications that embed com.meari.sdk, including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label
CVE-2026-45182
GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a registerQuicConnectionClosePayload optimization, because an application can let systemserver transmit UDP traffic on its behalf. This occurs when the "Block connections without VPN" a...
CVE-2025-55276
HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...
CVE-2025-55276 HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability
HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...
CVE-2025-55276: Exposure of Sensitive Information to an Unauthorized Actor
HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...
EUVD-2019-17552
Malware in sbrugna...
EUVD-2018-18355
Malware in sbrugna...
EUVD-2018-5309
Malware in sbrugna...
EUVD-2022-7407
Malicious code in bioql PyPI...