117 matches found
CVE-2025-15104
Nu Html Checker (validator.nu) — SSRF via restriction bypass in vnu (latest commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd). The issue allows remote attackers to induce the server to make arbitrary HTTP/HTTPS requests to internal resources, including localhost services. Protective hostname check...
CVE-2025-15104 Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF
Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...
CVE-2025-15104
Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...
PT-2026-3253
Name of the Vulnerable Software and Affected Versions Nu Html Checker versions prior to commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd Description The Nu Html Checker validator.nu is susceptible to a restriction bypass that enables remote attackers to initiate arbitrary HTTP/HTTPS requests to...
The Nu Html Checker security vulnerability
The Nu Html Checker is an open-source tool developed by The Nu Html Checker vnu that verifies whether HTML documents comply with modern web standards. The Nu Html Checker has a security vulnerability, which stems from a limitation that can be bypassed. This vulnerability could allow remote...
EUVD-2025-178692
Malicious code in good-chi-nu-info-hash npm...
EUVD-2025-178221
Malicious code in kappa-pi-nu-beta-lambda npm...
EUVD-2025-176591
Malicious code in route-await-root-monitor-nu npm...
EUVD-2025-177428
Malicious code in optimize-double-nu-cluster-function npm...
EUVD-2025-180137
Malicious code in balance-public-new-object-nu npm...
MAL-2025-187660 Malicious code in kappa-nu-daemon-async-bad (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b657d373edb8e61669489b5128e98ebd488496a11d5e249541214b28a780a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177516
Malicious code in nu-interpret-container-grep-bad npm...
EUVD-2025-179925
Malicious code in byte-nu-monitor-module-static npm...
EUVD-2025-178222
Malicious code in kappa-nu-daemon-async-bad npm...
EUVD-2025-175621
Malicious code in web-route-final-nu-route npm...
EUVD-2025-178022
Malicious code in long-nu-new-nu-cache npm...
Malicious code in scale-phi-deserialize-nu-sed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da7cfb294f277c58d7e8fe6484b55c4210fc860ea9b97bd8165568c264fb168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177517
Malicious code in nu-grid-import-chi-assert npm...