PersonalStuff

PersonalStuff sax.tar.xz - Epic sax guy video in .m3u8 format. TelegramPrivacy.pdf - Privacy bug in Telegram. firefoxaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.lnk - Corpous for fuzzing liblnk. pack.sh - Standard packages to resolve common dependencies in Ubuntu 18.04. tcpcorpus.tar.xz - Corpous for...

crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...

crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...

Xenon

Xenon Xenon is a Cobalt Strike-like Windows agent for Mythic, created by@c0rnbread. ⚠️ Xenon is in an early state of release. It is not opsec safe and could contain memory issues causing crashes. Test thoroughly if planning to use in a live environment. OPSEC Disclaimer Xenon makes no claims about...

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 CVSS score: 8.8, has been described as a use-after-free bug in the XML componen...

PT-2026-144133

An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager DSM before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read specific files, write arbitrary files, and conduct limited...

PT-2026-144121

Name of the Vulnerable Software and Affected Versions Synology DSM affected versions not specified Description A no-login SQL injection allows a remote attacker to read or overwrite files on the NAS without authentication. This issue bypasses security measures such as strong passwords and...

PT-2026-140927

Name of the Vulnerable Software and Affected Versions Tasmota versions prior to 16.0.0 Description A heap out-of-bounds write exists in the SendReceiveDeviceGroupMessage function. Unauthenticated attackers on the local network can corrupt heap memory by sending crafted Device Groups messages over...

CVE-2026-123616

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the datasize field. Attackers can supply a crafted 23-byte ICO file declaring a 4GB datasize to trigger memory exhaustion and worker crashes without authentication...

EUVD-2026-119375

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the datasize field. Attackers can supply a crafted 23-byte ICO file declaring a 4GB datasize to trigger memory exhaustion and worker crashes without authentication...

CVE-2026-123616: imgproxy: imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to…

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the datasize field. Attackers can supply a crafted 23-byte ICO file declaring a 4GB datasize to trigger memory exhaustion and worker crashes without authentication...

PT-2026-139897

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the data size field. Attackers can supply a crafted 23-byte ICO file declaring a 4GB data size to trigger memory exhaustion and worker crashes without authentication...

UBUNTU-CVE-2026-122329

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing...

CVE-2025-66365

Incorrect handling of SIP packets leads to baseband crashes...

EUVD-2025-211257

Incorrect handling of SIP packets leads to baseband crashes...

CVE-2025-66365

Incorrect handling of SIP packets leads to baseband crashes...

CVE-2025-66365

The vulnerability CVE-2025-66365 involves the incorrect handling of SIP packets , which can lead to baseband crashes . The provided documents do not specify the affected product, version, or component. No remediation information or exploit details are provided in the documents.

PT-2026-137316

Incorrect handling of SIP packets leads to baseband crashes...

crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...

PT-2026-137100

Name of the Vulnerable Software and Affected Versions ESP-IDF versions 5.5.5 through 5.5.5 ESP-IDF version 6.0.4 ESP-IDF version 6.1.1 Description In the ESP-TEE trap entry within esp tee vectors plic.S and esp tee vectors clic.S, the system saves a caller-controlled register frame using a stack...