Lucene search
+L

755 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/17 12:36 a.m.โ€ข10 views

CyberMeowfia

Website: nebusec.ai ยท Twitter @nebusecurity ยท Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel ๐Ÿ“– Writeup ยท ๐Ÿฆ Twitter Longinus : ...

8.8CVSS7.5AI score0.00504EPSS
SaveExploits3References1
Kitploit
Kitploit
โ€ขadded 2026/09/17 12:34 a.m.โ€ข12 views

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow This repository contains the materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtekโ€™s SDK for eCos OS.", which was presented at DEFCON30. The contents of...

9.8CVSS8.5AI score0.3708EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/16 8:49 p.m.โ€ข7 views

Nebula

Nebula Nebula is a Cloud and hopefully DevOps Penetration Testing framework. It is build with modules for each provider and each functionality. As of April 2021, it only covers AWS, but is currently an ongoing project and hopefully will continue to grow to test GCP, Azure, Kubernetes, Docker, or...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/16 6:39 p.m.โ€ข14 views

nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

6AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/16 1:07 p.m.โ€ข8 views

CVE-2026-43499-pja110

Website: nebusec.ai ยท Twitter @nebusecurity ยท Bug list 885+ Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel ๐Ÿ“– Writeup ยท ๐Ÿฆ Twitter Longinus : 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a...

7.8CVSS7AI score0.00789EPSS
SaveExploits99
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข7 views

CVE-2026-61699

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host from a Nebula mesh. Because the blocklist never reaches any peer's config.yml, a Blocked host retains full overlay...

8.1CVSS0.00249EPSS
SaveExploits0References3
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข9 views

CVE-2026-63464

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before version 0.7.2, non-admin operators role user can set allowprivate: true on their own managed webhook subscription POST/PATCH /api/v1/webhook-subscriptions. No admin check exists on this field. At...

7.7CVSS0.00266EPSS
SaveExploits0References3
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข6 views

CVE-2026-53602

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...

6.9CVSS0.00225EPSS
SaveExploits0References3
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข6 views

CVE-2026-53603

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS0.00204EPSS
SaveExploits0References3
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข7 views

CVE-2026-55513

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creatio...

5.4CVSS0.00187EPSS
SaveExploits0References3
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข7 views

CVE-2026-55512

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before version 0.5.0, when OIDC is enabled, GET /ui/oidc/login is reachable without authentication and is registered outside the Web UI rate-limited auth routes. Every request creates a fresh random OIDC...

5.3CVSS0.00333EPSS
SaveExploits0References3
NVD
NVD
โ€ขadded 2026/09/04 8:17 p.m.โ€ข5 views

CVE-2026-53604

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build...

7.1CVSS0.00116EPSS
SaveExploits0References3
Cvelist
Cvelist
โ€ขadded 2026/09/04 7:44 p.m.โ€ข39 views

CVE-2026-63464 Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before version 0.7.2, non-admin operators role user can set allowprivate: true on their own managed webhook subscription POST/PATCH /api/v1/webhook-subscriptions. No admin check exists on this field. At...

7.7CVSS0.00266EPSS
SaveExploits0References3
CVE
CVE
โ€ขadded 2026/09/04 7:44 p.m.โ€ข18 views

CVE-2026-63464

CVE-2026-63464 affects nebula-mesh , a self-hosted control plane for Slack Nebula mesh VPN, in versions 0.6.0 through before 0.7.2 . The vulnerability is an SSRF that arises because non-admin operators (role user) can set allow_private: true on their own webhook subscription via POST/PATCH /api/v...

7.7CVSS5.3AI score0.00266EPSS
SaveExploits0References3
OSV
OSV
โ€ขadded 2026/09/04 7:44 p.m.โ€ข8 views

CVE-2026-63464 Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before version 0.7.2, non-admin operators role user can set allowprivate: true on their own managed webhook subscription POST/PATCH /api/v1/webhook-subscriptions. No admin check exists on this field. At...

7.7CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
โ€ขadded 2026/09/04 7:43 p.m.โ€ข38 views

CVE-2026-61699 nebula-mesh: Certificate revocation is never enforced at the mesh

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host from a Nebula mesh. Because the blocklist never reaches any peer's config.yml, a Blocked host retains full overlay...

8.1CVSS0.00249EPSS
SaveExploits0References3
CVE
CVE
โ€ขadded 2026/09/04 7:43 p.m.โ€ข45 views

CVE-2026-61699

nebula-mesh (forgekeep) is a self-hosted control plane for the Slack Nebula mesh VPN. Prior to v0.7.1 , the agent-side poller decodes the per-CA revocation blocklist from the server but discards it โ€” it never writes pki.blocklist into the local config.yml, and the config generator has no field to...

8.1CVSS8.5AI score0.00249EPSS
SaveExploits0References3
OSV
OSV
โ€ขadded 2026/09/04 7:43 p.m.โ€ข5 views

CVE-2026-61699 nebula-mesh: Certificate revocation is never enforced at the mesh

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host from a Nebula mesh. Because the blocklist never reaches any peer's config.yml, a Blocked host retains full overlay...

8.1CVSS5.7AI score
SaveExploits0References5
CVE
CVE
โ€ขadded 2026/09/04 7:43 p.m.โ€ข45 views

CVE-2026-55513

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. In versions 0.3.0 through before 0.5.0 , the POST /ui/hosts Web UI endpoint hardcodes a 24-hour enrollment token expiry instead of using the configured enrollment_token_ttl (server-wide or per-network) resolver that the API pat...

5.4CVSS8.5AI score0.00187EPSS
SaveExploits0References3
Cvelist
Cvelist
โ€ขadded 2026/09/04 7:43 p.m.โ€ข39 views

CVE-2026-55513 nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creatio...

5.4CVSS0.00187EPSS
SaveExploits0References3
Rows per page
Query Builder