196231 matches found
DEBIAN-CVE-2026-82659
nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw message...
DEBIAN-CVE-2026-82660
Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local files or fetch URLs by supplying path or href values in message content fields, bypassing intended access controls...
DEBIAN-CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
DEBIAN-CVE-2026-82661
Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list..comment parameters can inject CRLF sequences to create additional headers in generated RFC822...
DEBIAN-CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...
CVE-2026-82628
creationtimestamp| type| source ---|---|--- 2026-08-31 07:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muef4ppacs25 2026-08-31 08:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mueh76tlu72j...
CVE-2026-82620
creationtimestamp| type| source ---|---|--- 2026-08-31 06:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cu2wjc4nhkuus...
CVE-2026-82692
creationtimestamp| type| source ---|---|--- 2026-08-31 06:31:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117188714822677912...
nightcrawler — Updated!
Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report — all without cloud connectivity. root@kitploit: ░█▄░█ █ █▀▀ █░█ ▀█▀ █▀▀ █▀...
CVE-2026-82615
creationtimestamp| type| source ---|---|--- 2026-08-31 06:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2as22naaivedq 2026-08-31 13:36:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muezmnrems2z...
CVE-2026-82618
creationtimestamp| type| source ---|---|--- 2026-08-31 06:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2wv2vbiczzjdx...
CVE-2026-82673
creationtimestamp| type| source ---|---|--- 2026-08-31 04:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2m3nheghtlrhy...
DNSlivery
DNSlivery Easy files and payloads delivery over DNS. DNSlivery Acknowledgments Description TL;DR What problem are you trying to solve? How does it work? Requirements Setup DNS Zone DNSlivery Usage Server Target Acknowledgments This project has been originally inspired by PowerDNS and Joff Thyer's...
CVE-2026-82597
creationtimestamp| type| source ---|---|--- 2026-08-31 02:26:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdmsvt5spjy6z...
CVE-2026-82599
creationtimestamp| type| source ---|---|--- 2026-08-31 02:14:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f5lru4e2f7ouh...
MINI-RWRH-H828-CG4R
Bulletin has no description...
MINI-42WG-2RW6-QC58
Bulletin has no description...
MINI-3MG3-CWF4-W5H3
Bulletin has no description...