CVE-2026-56855 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

GO-2026-6354 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

GO-2026-6355 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

mmiotic

mmiotic Un outil exploratoire pour le timing MMIO — mesurez n'importe quelle adresse physique et disséquez le matériel à partir de la latence. Étonnamment utile pour la rétro-ingénierie matérielle, l'empreinte des hyperviseurs, l'analyse par canaux auxiliaires de l'activité des périphériques, la...

ls-poc

Preuve de concept CVE-2026-30368 !IMPORTANT Ceci est corrigé et nécessite désormais des identifiants, utilisez la solution de contournement pour effectuer des actions sur vous-même. Introduction CVE-2026-30368 permet à un attaquant de contrôler les appareils des étudiants via une faille...

CVE-2024-4253

creationtimestamp| type| source ---|---|--- 2026-09-02 14:00:04+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik 2026-09-03 00:00:46+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik...

CVE-2026-70481

CVE-2026-70481 Open WebUI, versions 0.5.0 à 0.10.2 concernées, corrigé dans 0.11.0. Modéré, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 et CWE-862. Dans backend/openwebui/routers/channels.py, les gestionnaires de mise à jour et de suppression de messages se divisent selon le...

CVE-2026-59276

Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...

ssh-enum

ssh-enum Étude de validation statistique de CVE-2016-6210 Une réinvestigation reproductible de l'énumération de noms d'utilisateur OpenSSH par analyse statistique. Ce projet réinvestit CVE-2016-6210 , un canal auxiliaire temporel documenté d'OpenSSH, afin de déterminer s'il reste observable sur u...

spectre-attack

Пример атаки Spectre Пример использования раскрытого эксплойта «Spectre» от 2 января 2018 года CVE-2017-5753 и CVE-2017-5715 Spectre нарушает изоляцию между различными приложениями. Он позволяет атакующему обманом заставить безошибочные программы, следующие лучшим практикам, раскрыть свои секреты...

CVE-2026-84361

creationtimestamp| type| source ---|---|--- 2026-09-02 09:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100749 2026-09-02 10:00:05+00:00| published-proof-of-concept| Telegram/Zg7xNPwQElgOazaR8r2v4bs6d55u6MTShsUIaSZkGoRM78 2026-09-02 13:30:04+00:00| seen|...

CVE-2026-33016

creationtimestamp| type| source ---|---|--- 2026-09-02 06:00:13+00:00| seen| https://t.me/HackingTeamGrupoOfficial/45642 2026-09-03 00:00:48+00:00| seen| https://t.me/HackingTeamGrupoOfficial/45642...

apple-positional-audio-codec-invalid-header

Доказательство концепции для исправления CoreAudio CVE-2025-31200 в iOS 18.4.1. Статья здесь https://blog.noahhw.dev/posts/cve-2025-31200/. Обновление от 27.05.2025 Я смог довести это до контролируемой записи, если не произвольной. Статья скоро появится. Однако, чтобы увидеть это самостоятельно,...

vhf-morse-transmitter-monitor

📡 Émetteur RF de Moniteur VHF Générateur Morse par Canal Auxiliaire TEMPEST / EMI Auteur : TA1EEI Efe Işık Version : 1.2 Licence : MIT Open Source / Éducatif et Expérimental 📰 Présentations et Couverture Médias Hackaday - Get Your Monitor Transmitting VHF With A Browser Tool RTL-SDR.com - An HTML...

ghostsplice

GhostSplice : fragmentation de la confiance inter-canaux PoC d'attaque Code de preuve de concept pour GhostSplice , une attaque du groupe de recherche ASSET. L'article complet est disponible ici : « L'IA a refusé de voler les secrets. Alors nous lui avons donné un formulaire. ». L'idée en termes...

CVE-2024-55591

CVE-2024-55591 PoC Этот репозиторий содержит PoC Proof of Concept для CVE-2024-55591 — критической уязвимости обхода аутентификации, обнаруженной в продуктах Fortinet FortiOS и FortiProxy. Обзор уязвимости CVE-2024-55591 — это уязвимость обхода аутентификации , вызванная использованием...

CVE-2017-9096

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-02 01:00:12+00:00| seen| Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY5ATwXxwRV07Zq46AA 2026-09-03 00:00:54+00:00| published-proof-of-concept|...

PT-2026-84861

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists where a channel registered in the mux's chanList remains unusable until it is established. A malicious peer can flood the incomingRequests of the...

PT-2026-84853

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A malicious peer can send crafted messages after a channel has been established to cause a deadlock of the entire connection. This occurs because the system...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...