CVE-2002-0991

CVE-2002-0991 Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier Exploit-db publication at https://www.exploit-db.com/exploits/21577/ Packetstorm publication at https://packetstormsecurity.com/files/26303/cifslogin.txt.html SecurityFocus publication at...

CVE-2015-10141

CVE-2015-10141 Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 Explanation An unauthenticated OS command...

CVE-2025-68926

Instrucciones de uso del PoC Detección de un solo objetivo python poc.py -H 127.0.0.1 -p 9000 La salida incluye vulnerable: True/False y los serverproperties decodificados. Detección por lotes 1. Escriba host:port línea por línea en un archivo, por ejemplo: 10.0.0.1:9000 10.0.0.5:9000 2. Ejecute:...

CVE-2023-6019

Python POC Derived from Authors POC Usage python3 CVE-2023-6019.py -t 192.168.191.37 -p 9000 -l 192.168.45.xxx -lp 4444...

DEBIAN-CVE-2026-35191

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

AZL-105612 CVE-2026-35191 affecting package openvmm 0.1.0-1

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

AZL-105885 CVE-2026-35191 affecting package rust 1.96.1-2

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

AZL-105837 CVE-2026-35191 affecting package rust 1.75.0-31

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

CVE-2026-35191

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

CVE-2026-35191 QUIC Unvalidated Amplification Credit may be Over Accounted

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

EUVD-2026-89002

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

CVE-2015-10141

CVE-2015-10141 – Ejecución Remota de Código RCE en XDebug CVE-2015-10141 es una vulnerabilidad de inyección de comandos del sistema operativo sin autenticación que afecta a las versiones 2.5.5 y anteriores de Xdebug. Causa raíz: Cuando la función de depuración remota de Xdebug está habilitada, la...

QUIC Unvalidated Amplification Credit may be Over Accounted

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

Linux Distros Unpatched Vulnerability : CVE-2026-35191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its...

PT-2026-102648

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The OpenSSL QUIC server, when configured to skip address validation, incorrectly calculates the unvalidated credit limit. When processing a datagram containing multiple QUIC packets, the serv...

CVE-2026-35191: Expected Behavior Violation

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7 umbrella CVEs, 2 of which are rated 9.8, with no...

Vulnerabilities found in Cisco Nexus 9000 Series, iOS XR Software, and Secure Email

Cisco has identified vulnerabilities in Cisco Nexus 9000 Series switches with Silicon One technology, Cisco IOS XR software, and Cisco Secure Email. The most serious vulnerability affects Nexus 9000 switches: when TCP ports 43210 or 43211 are accessible, an attacker can execute commands without a...

CVE-2026-20212

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

EUVD-2026-70201

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...