TrustTunnel v1.1.0

Clients · App Store iOS · App Store macOS · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuratio...

OPENSUSE-SU-2026:21720-1 Security update for dovecot24

This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mailmaxuseripconnections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after...

beelzebub v3.9.1

Beelzebub Deception Runtime Framework Beelzebub is an open-source deception runtime that deploys adaptive, LLM-powered decoy services across SSH, HTTP, TCP, TELNET, and MCP protocols. It goes beyond passive honeypots by actively engaging attackers in realistic interactions, collecting high-fideli...

CVE-2026-9621 RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

cve-reproduction-reports

React2Shell CVE-2025-55182 Vulnerability Reproducing Report...

RLSA-2026:61378 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP...

CVE-2025-3243

🔐 CVE-2025-3243 SSH Checker Fast. Lean. No-BS. Python script for initial exposure check of the CVE-2025-3243 vulnerability related to the Erlang/OTP SSH client. This project was designed for quick triage , reduction of operational uncertainty , and attack surface validation in environments where...

CVE-2026-33606

A flaw was found in Dovecot. A malicious user can craft specific mail content that, when an administrator later uses the dsync tool with the stream protocol, is interpreted as dsync commands. This command injection allows the user to modify the state of mailboxes on the destination, including...

nDPI v6.0

nDPI What is nDPI ? nDPI® is an open source LGPLv3 library for deep-packet inspection. A generic FAQ about nDPI is available here How To Compile nDPI In order to compile this project do ./autogen.sh && ./configure make If you get some errors while compiling croaring.c, try: ./autogen.sh &&...

librepods nightly-53679cc

!WARNING librepods.org is not an official website of the LibrePods project. It inaccurately claims to be the official website of the project by claiming copyrights and using the LibrePods logo in the footer. And at the same time, they say that the project is not affiliated with the LibrePods...

CVE-2026-82731

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ash-project ashtypescript allows an attacker who controls a path-parameter value to redirect a generated client's request, and the credentials attached to it, to an unintended route or an external origin. The URL builders in...

EUVD-2026-68930

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ash-project ashtypescript allows an attacker who controls a path-parameter value to redirect a generated client's request, and the credentials attached to it, to an unintended route or an external origin. The URL builders in...

SSTP Code Execution

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the reclamation of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ALSA-2026:62218 Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

Ranked by the Matcher: A Reproducibility Audit of Knowledge Graph Extraction from Threat Reports

Security teams and researchers choose knowledge-graph extraction tooling for threat reports on the strength of published triple-F1 scores, yet those scores depend on how predicted triples are matched to gold annotations. We could reimplement the stated matching rule for only five of twelve...

Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

AlmaLinux 9 : nodejs:22 (ALSA-2026:61383)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

NPM: MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS

NPM: MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS vulnerability discovered by ? in WordPress Npm mysql2 versions = 3.23.0...

GHSA-RGWJ-5XJ2-C3M3 MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS

Vulnerability Details File: lib/compressedprotocol.js Line: 43 zlib.inflatebody, err, data = ... inside handleCompressedPacket Root Cause When a connection is created with compress: true and the server advertises CLIENTCOMPRESS, every incoming packet is unwrapped by handleCompressedPacket in...