95 matches found
DEBIAN-CVE-2026-119568
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssldataaccept that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the...
PT-2026-133506
Name of the Vulnerable Software and Affected Versions vsftpd versions prior to 3.0.6 Description An authentication bypass exists in the ssl data accept function. Unauthenticated attackers who share the same source IP address as a victim can hijack FTPS data connections by resuming their own TLS...
CVE-2026-55458
Caddy's reverse proxy fails to strip RFC 7230 hop-by-hop headers from upstream responses when handling WebSocket upgrades HTTP 101 Switching Protocols. Headers including "Alt-Svc", "Keep-Alive", "Proxy-Authenticate", "Transfer-Encoding", or "Trailer", which Caddy actually correctly strips for...
GHSA-8QX7-J2V2-X6Q5 Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
AI Disclosure This vulnerability was discovered via deepseek-v4-pro1m for finding potential vulnerabilities / inconsistencies in the code base. I made the AI check if Caddy is compliant with various RFCs, incl. 7230. I also used it to help write the PoC, since it was honestly much faster than...
Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
AI Disclosure This vulnerability was discovered via deepseek-v4-pro1m for finding potential vulnerabilities / inconsistencies in the code base. I made the AI check if Caddy is compliant with various RFCs, incl. 7230. I also used it to help write the PoC, since it was honestly much faster than...
PT-2026-130608
AI Disclosure This vulnerability was discovered via deepseek-v4-pro1m for finding potential vulnerabilities / inconsistencies in the code base. I made the AI check if Caddy is compliant with various RFCs, incl. 7230. I also used it to help write the PoC, since it was honestly much faster than...
CLEANSTART-2026-OM02882 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...
CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...
CLEANSTART-2026-ER85100 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...
CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...
kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...
CLEANSTART-2026-IS42310 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...
CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...
kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...
PT-2026-93801
Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A stream desynchronization issue exists in the AMQP wire-protocol parser. When the readLongstr function in read.go encounters a declared AMQP longstr length exceeding 0x7FFFFFFF the...
UBUNTU-CVE-2026-61634
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...
CVE-2026-64024
A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...
PT-2025-45804
Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd...
EUVD-2008-1485
Malware in sbrugna...
EUVD-2008-4210
Malware in sbrugna...
EUVD-2009-4407
Malware in sbrugna...