legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

spring-amqp-deserialization

spring-amqp-deserialization Una Prueba de Concepto de la Vulnerabilidad de Deserialización de Spring AMQP CVE-2023-34050 Versiones afectadas: 1.0.0 a 2.4.16 3.0.0 a 3.0.9 Referencia: https://spring.io/security/cve-2023-34050...

OESA-2026-3940 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improp...

CVE-2016-2173

CVE-2016-2173 - Ejecución Remota de Código en Spring AMQP - Prueba de Aplicación Descripción La clase org.springframework.core.serializer.DefaultDeserializer no valida el objeto deserializado contra una lista blanca. Al suministrar un objeto serializado manipulado, como el gadget de Commons...

CLEANSTART-2026-KV65948 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-AD74285 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-QD76067 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-KU86839 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-LD19484 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CVE-2026-81505

Convoy , a cloud-native webhooks gateway, is affected by a cross-tenant IDOR in the GET /api/v1/projects/{projectID}/sources/{sourceID} endpoint. The handler authorizes the project in the URL but sources.Service.FindSourceByID() fetches the source solely by sourceID without verifying that its Pro...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

Linux Distros Unpatched Vulnerability : CVE-2026-77412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readField in read.go reads the length of an AMQP byte-array field with type tag x into a signed...

CVE-2026-77412

A flaw was found in RabbitMQ amqp091-go. A malicious or compromised broker can send a specially crafted AMQP Advanced Message Queuing Protocol message with a malformed field length. This can cause an integer overflow, leading to a runtime panic in the client process. Consequently, the client...

CVE-2026-44236

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

Summary A vulnerability in the readField function allows a malicious or compromised AMQP server to trigger an unhandled runtime panic in the client application, leading to an immediate crash of the entire process. Details When parsing incoming AMQP frames, the readField function processes...

GHSA-4V58-74MF-RJX3 RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

Summary A vulnerability in the readField function allows a malicious or compromised AMQP server to trigger an unhandled runtime panic in the client application, leading to an immediate crash of the entire process. Details When parsing incoming AMQP frames, the readField function processes...

CVE-2026-44236 rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

Summary A Denial of Service DoS vulnerability exists in the AMQP client's connection negotiation logic. The AMQP specification explicitly mandates a strict minimum frame size of 4096 bytes to prevent pathological packet fragmentation. While the library defines a frameMinSize = 4096 constant, the...

CVE-2026-44236: Heap-based Buffer Overflow

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...

CVE-2026-75516 RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...