net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.16 security update

Red Hat build of MicroShift release 4.22.16 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 packages and security update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit corrupción de caché de página parcial-COW culpable 899ee91156e5, presente v5.18 .. corregido v7.1-rc7. packeteditmeme.c lo convierte en root local sin privilegios: un hijo userns CAPNETADMIN sobrescribe los metadatos ELF almacenados en caché de u...

cve-2026-46331-audit

cve-2026-46331-audit -7.8%20HIGH-orange?style=flat-square Read-only audit script for CVE-2026-46331 a.k.a. pedit COW — a partial copy-on-write bug in the Linux kernel's net/sched actpedit action that lets a local unprivileged user corrupt page cache memory and escalate to root. | | | \ | | / / \ ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 security and extras update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

VMUnprotect.Dumper

VMUnprotect.Dumper VMUnprotect.Dumper es un proyecto dedicado a la caza de ensamblados de VMProtect manipulados. Hace uso de AsmResolver para desempaquetar dinámicamente ensamblados protegidos por VMP. Funciona en VMProtect 3.7.0 la última versión y algunas versiones anteriores. Antes del uso de...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Based on the original exploit from Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ credits to Aaron Herndon / https://twitter.com/ac3lives /...

CVE-2026-18746

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers CVE-2026-68082 In the Linux kernel, the following vulnerability has been resolved: libceph: bound pgtemp,upmap,upmapitems length to CEPHPGMAXSIZE CVE-2026-6815...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory. Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to...

Oracle Linux 9 : ruby:4.0 (ELSA-2026-72484)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72484 advisory. - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion CVE-2026-80212 Resolves: RHEL-252035 - Fix...

ROS-20260929-73-0147

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the net/sched subsystem of the Linux kernel’s network management mechanism, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise...

ROS-20260929-73-0189

The vulnerability of the decodepool function in the net/ceph/osdmap.c module, which implements kernel networking functions in the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

ROS-20260929-73-0052

The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

ROS-20260929-73-0063

The vulnerability of the cgwcsumcrc8rel function in the net/can/gw.c module of the Linux operating system’s CAN subsystem relates to access to a memory cell preceding the buffer’s start. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260929-73-0017

The vulnerability of the netpollcleanup function in the net/core/netpoll.c module of the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...