nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate

Summary Two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate issuance time — only at poll time. 1. Blocklist not enforced at sign / re-enroll time...

GHSA-339V-266X-79XR nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate

Summary Two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate issuance time — only at poll time. 1. Blocklist not enforced at sign / re-enroll time...

PT-2026-57037

Name of the Vulnerable Software and Affected Versions nebula-mesh versions 0.3.6 and earlier Description Two authorization gaps in nebula-mgmt allow untrusted hosts to obtain valid certificates. First, the system fails to enforce the blocklist during certificate issuance or re-enrollment. Because...

X-Chat 1.x CTCP Ping Arbitrary Remote IRC Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3830/info X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is available for many Linux and Unix operating systems. If a CTCP ping request includes escaped newline characters and additional IRC...

X-Chat 1.x - CTCP Ping Remote IRC Command Execution

X-Chat 1.x - CTCP Ping Remote IRC Command Execution source: https://www.securityfocus.com/bid/3830/info X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is available for many Linux and Unix operating systems. If a CTCP ping request includes escaped newline characters and...

X-Chat 1.x - CTCP Ping Remote IRC Command Execution

source: https://www.securityfocus.com/bid/3830/info X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is available for many Linux and Unix operating systems. If a CTCP ping request includes escaped newline characters and additional IRC commands, these commands may be execute...

ircbug.txt

Version 2.8/Hybrid-6b96 Vulnerable ================================================== Bug found by drfdisk^ ------------------------------ This bug its really stupid to exploit and you can obtain IRCop level in vulnerable servers... How exploit this bug??? ----------------------- 1 First lo on to...