bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

EUVD-2026-66669

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

http2-security-lab

🦣 TuskMads Laboratorio di Sicurezza HTTP/2 Un laboratorio di simulazione e difesa degli attacchi HTTP/2 costruito da zero in puro Python. Cosa Fa Simula 3 attacchi HTTP/2 reali contro un server vulnerabile, poi dimostra 5 livelli di difesa che bloccano tutti e 3 su un server protetto. Attacchi...

EUVD-2026-66656

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-66641

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2020-15878

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajaxtable.php API endpoint...

CVE-2026-79288

A flaw was found in Google Chrome's Autofill feature on Android. Improper input validation allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the exposure of sensitive user data...

CVE-2026-79077

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, the attacker can exploit this flaw to gain unauthorized access to restricted parts of the system...

CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...

CVE-2026-79146

A flaw was found in CustomTabs in Google Chrome. A local attacker could exploit this vulnerability through a co-installed application. This could result in an information leak, allowing the attacker to access cross-origin data...

CVE-2026-79291

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-79264

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Preload component, allows a remote attacker to bypass the web origin policy. By crafting a malicious HTML page, an attacker could potentially access sensitive information or perform unauthorized...

CVE-2026-79024

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...

CVE-2026-79016

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in how Scalable Vector Graphics SVG are handled by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosu...

CVE-2026-78912

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation, allowing the attacker to spoof UI elements and potentially deceive users...

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...

CVE-2026-78898

A flaw was found in Google Chrome's Downloads feature. A remote attacker can exploit this vulnerability by leveraging social engineering techniques with a specially crafted HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized access or...

CVE-2026-79107

A flaw was found in Google Chrome. Incorrect authorization within the TabGroups feature could allow a remote attacker to exploit this vulnerability. By sending crafted network traffic, an attacker could potentially leak sensitive information from the user's browser...

CVE-2026-79118

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive cross-origin data...