mail/mailpit -- Cross-Site WebSocket Hijacking

Mailpit author reports: The Mailpit WebSocket server is configured to accept connections from any origin. This lack of Origin header validation introduces a Cross-Site WebSocket Hijacking CSWSH vulnerability. An attacker can host a malicious website that, when visited by a developer running Mailp...

EUVD-2009-1105

Malware in sbrugna...

EUVD-2001-1454

Malware in sbrugna...

SUSE CVE-2008-5345

Unspecified vulnerability in Java Runtime Environment JRE with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make...

CVE-2022-4335

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host...

CVE-2019-10882 Netskope client buffer overflow vulnerability

The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users...

602Pro LAN SUITE 2002 Telnet Proxy Localhost Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5416/info The 602Pro LAN SUITE 2002 Telnet Proxy is reported to be prone to a denial of service condition. It is possible for proxy users to use the loopback interface to connect to localhost. If a large number of these...

inetd DoS exploit

Name: inetd DoS exploit Author: SeregaLinux ser@ihg prog$ ./pscaner -h 127.0.0.1 / it's my port scaner / Open ports on 127.0.0.1 ----------------------------- 21 OPEN : 220 ihg.localhost FTP server Version wu-6.6.65 Sat Feb 17 15:10:44 MSK 2001 ready. 23 OPEN : 25 OPEN : 220 ihg.localhost ESMTP...

CVE-2001-1474

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...