322 matches found
Exploit for CVE-2026-35333
CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth...
SUSE CVE-2026-25075
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
CVE-2026-25075
A flaw was found in strongSwan. An unauthenticated remote attacker can exploit an integer underflow vulnerability in the EAP-TTLS AVP Attribute-Value Pair parser. By sending specially crafted AVP data with invalid length fields during IKEv2 Internet Key Exchange version 2 authentication, the...
AZL-80300 CVE-2026-25075 affecting package strongswan for versions less than 5.9.14-9
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
CVE-2026-25075
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
UBUNTU-CVE-2026-25075
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
CVE-2026-25075: Integer Underflow (Wrap or Wraparound)
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
Malicious code in hexo-boson-charon-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in transform-carpo-charon-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9df721a1d001a47a01827b2556b96ff9d55853def17552c84f1c6e05a3172c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177334
Malicious code in panspermia-panspermia-polaris-charon npm...
EUVD-2025-176859
Malicious code in quark-charon-hercules-lepton npm...
EUVD-2025-176681
Malicious code in resolvers-auth0-version-charon npm...
EUVD-2025-178532
Malicious code in hexo-boson-charon-framework npm...
EUVD-2025-179558
Malicious code in corvus-javascript-charon-semantic-ui npm...
EUVD-2025-179525
Malicious code in cosmos-centaurus-charon-tool npm...
EUVD-2025-178924
Malicious code in fetch-charon-callisto-meissa npm...
EUVD-2025-180050
Malicious code in biosignature-quasar-galaxy-charon npm...
EUVD-2025-179750
Malicious code in charon-transhumanism-zephyr-electron-builder npm...