Exploit for CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth...

SUSE CVE-2026-25075

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...

CVE-2026-25075

A flaw was found in strongSwan. An unauthenticated remote attacker can exploit an integer underflow vulnerability in the EAP-TTLS AVP Attribute-Value Pair parser. By sending specially crafted AVP data with invalid length fields during IKEv2 Internet Key Exchange version 2 authentication, the...

UBUNTU-CVE-2026-25075

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...

EUVD-2025-180420

Malicious code in antares-jsonp-charon-europa npm...

EUVD-2025-179750

Malicious code in charon-transhumanism-zephyr-electron-builder npm...

EUVD-2025-176859

Malicious code in quark-charon-hercules-lepton npm...

EUVD-2025-179558

Malicious code in corvus-javascript-charon-semantic-ui npm...

EUVD-2025-177273

Malicious code in pegasus-xo-charon-karma npm...

EUVD-2025-179940

Malicious code in bunyan-areology-glaciology-charon npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

EUVD-2025-178924

Malicious code in fetch-charon-callisto-meissa npm...

EUVD-2025-176681

Malicious code in resolvers-auth0-version-charon npm...

EUVD-2025-176339

Malicious code in slidev-odin-charon-pino-pretty npm...

Malicious code in slidev-odin-charon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-passport-charon-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a913dba1da1b938c98f9b6be2e6a3d983d34324af40a2987f86fdc7232dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-jsonp-charon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4d80577e0db7da7c6c0f0734eee7b372d1ea0a1894b44188cf2593f584973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177964

Malicious code in mantle-asteroid-charon-quasar npm...

EUVD-2025-180050

Malicious code in biosignature-quasar-galaxy-charon npm...

EUVD-2025-179108

Malicious code in envconfig-passport-charon-hermes npm...