CVE-2026-98255

A flaw was found in the Linux kernel. Its TCP Transmission Control Protocol fast-path processing logic fails to properly filter out-of-bounds acknowledgment ACK packets before validating them. A remote attacker could exploit this vulnerability by sending network packets with outdated ACK numbers,...

CVE-2026-77411

RabbitMQ amqp091-go versions before 1.13.0 mishandle an oversized AMQP longstr field. A malicious or compromised broker can desynchronize message parsing, causing subsequent bytes to be interpreted as AMQP data and disrupting connection integrity or availability. Fixed in version 1.13.0. Mitigati...

DEBIAN-CVE-2026-77411

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...

CVE-2026-77411

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...

CVE-2026-61634 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

Denial Of Service

github.com/hashicorp/boundary is vulnerable to denial of service. The vulnerability is due to improper handling of TLS handshakes during worker node enrollment, where an attacker can delay or withhold the client certificate to block connection handling, allowing legitimate worker connections to b...

PT-2025-49838

Name of the Vulnerable Software and Affected Versions Affected products affected versions not specified Description The software does not properly validate TCP sequence numbers in certain situations, accepting a wide range of values. This could allow a remote attacker to disrupt connection...

EUVD-2021-27041

Malware in sbrugna...

EUVD-2024-31553

Malicious code in bioql PyPI...

EUVD-2024-22995

Malicious code in bioql PyPI...

CVE-2024-25679

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...

CVE-2024-33844

The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAVMISSIONTYPE0, 1, 2, 255, which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSIONCOUNT command with a wrong MAVMISSIONTYPE...

CVE-2021-34150

The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...

CVE-2024-34036

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...

CVE-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

PT-2024-25506 · Parrot · Parrot Anafi Usa

Name of the Vulnerable Software and Affected Versions: Parrot ANAFI USA firmware version 1.10.4 Description: The issue concerns a lack of validation for the MAV MISSION TYPE in the Parrot ANAFI USA firmware, specifically for values 0, 1, 2, and 255. This allows an attacker to disrupt the connecti...

CVE-2024-25679

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...

CVE-2024-25679: Use of a Key Past its Expiration Date

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...

PT-2024-21087

Name of the Vulnerable Software and Affected Versions PQUIC versions prior to 5bde5bb Description The issue allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as...

CVE-2024-25679

Affected software : PQUIC (open source). Vulnerability : retention of unused initial encryption keys can disrupt a PSK-configured connection by sending a CONNECTION_CLOSE frame encrypted with the initial key computed (pre-5bde5bb). Impact : confidentiality impact HIGH; availability impact LOW; ot...