CVE-2026-43974

creationtimestamp| type| source ---|---|--- 2026-06-08 15:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns2fst52p2r...

CVE-2026-43974 gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM

Unexpected Status Code or Return Value vulnerability in ninenines gun gunhttp module allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Protocols response. In gunhttp:handleinform/8, when a 101 Switching Protocols response is received over...

EUVD-2025-43974

Malicious code in hadi-asinan55-riris npm...

CVE-2022-43974

MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code execution. This is fixed in 4.6.0...

CVE-2024-43974

Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReviveNews: from n/a through 1.0.2...

WordPress ReviveNews Theme <= 1.0.2 is vulnerable to Broken Access Control

Software ReviveNews Type Theme Vulnerable versions = 1.0.2 Fixed in 1.0.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43974 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 47fb9a9aedf3 Credits Fariq Fadillah Gusti Insani...

CVE-2022-43974

MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code execution. This is fixed in 4.6.0...

CVE-2022-43974

Summary: CVE-2022-43974 affects MatrixSSL versions 4.0.4–4.5.1, where an integer overflow in matrixSslDecodeTls13 could be triggered by a crafted TLS message, leading to remote code execution. Multiple security feeds confirm this issue and indicate a fixed version in 4.6.0. Impact (as stated): Re...

CVE-2022-43974

MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code execution. This is fixed in 4.6.0...

CVE-2021-43974

creationtimestamp| type| source ---|---|--- 2022-01-11 22:16:15+00:00| seen| https://t.me/cibsecurity/35264 2022-01-22 08:45:24+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1646 2022-01-22 22:20:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5254...

CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...