CVE-2026-108769

A security flaw exists in zhayujie CowAgent up to version 2.2.0 . The vulnerability affects an unknown part of the Markdown.tsx file within the Markdown Rendering component. Exploitation allows for a denial of service and can be launched remotely . A public exploit is available, and although the ...

CVE-2026-108769

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public...

graphql-cop

GraphQL Cop - Utilidad de Auditoría de Seguridad para GraphQL Acerca de GraphQL Cop es una pequeña utilidad de Python para ejecutar pruebas de seguridad comunes contra APIs de GraphQL. GraphQL Cop es perfecto para ejecutar verificaciones CI/CD en GraphQL. Es ligero y cubre problemas de seguridad...

CVE-2026-19738

The Bluetooth Link Layer Control Procedure LLCP implementation for Connected Isochronous Stream CIS creation retains an RX node ctx-noderef.rx, marked NODERXTYPERETAIN so it can later be reused as the host notification — on the peripheral while awaiting the Host's reply to an LLCISREQ, and on the...

CVE-2026-19740

The Link Layer Control Procedure LLCP implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LLPHYUPDATEIND so that it can later be reused for the host notification when the update instant is reached llcprxnoderetain in...

slowloris

slowloris.py - Slowloris simple en Python ¿Qué es Slowloris? Slowloris es básicamente un ataque de Denegación de Servicio HTTP que afecta a servidores con hilos. Funciona así: 1. Comenzamos a hacer muchas solicitudes HTTP. 2. Enviamos encabezados periódicamente cada 15 segundos para mantener las...

EUVD-2026-97109

The Link Layer Control Procedure LLCP implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LLPHYUPDATEIND so that it can later be reused for the host notification when the update instant is reached llcprxnoderetain in...

CVE-2026-19740

The Link Layer Control Procedure LLCP implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LLPHYUPDATEIND so that it can later be reused for the host notification when the update instant is reached llcprxnoderetain in...

CVE-2026-19739

The Bluetooth LE controller contains a resource leak in the Link Layer control procedure located in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c. When a device receives a Connection Update or Connection Parameter procedure and subsequently receives an unexpected LL Control PDU before the...

CVE-2026-19738

The Bluetooth Link Layer Control Procedure (LLCP) implementation in Zephyr RTOS contains a memory leak and reachable assertion during Connected Isochronous Stream (CIS) creation. Specifically, in subsys/bluetooth/controller/ll_sw/ull_llcp_cc.c, the "invalid PDU received" paths of llcp_rp_cc_rx() ...

CVE-2026-19738

The Bluetooth Link Layer Control Procedure LLCP implementation for Connected Isochronous Stream CIS creation retains an RX node ctx-noderef.rx, marked NODERXTYPERETAIN so it can later be reused as the host notification — on the peripheral while awaiting the Host's reply to an LLCISREQ, and on the...

CVE-2026-19577 Out-of-bounds read in IPv6 route forwarding when the nexthop neighbor has no link-layer address

netrouteipv6packet in subsys/net/ip/routeipv6.c resolved the nexthop's link-layer address with netnbrgetlladdrnbr-idx without first checking whether the neighbor cache entry actually had a linked link-layer address. An unresolved neighbor carries idx == NETNBRLLADDRUNKNOWN 0xff, and netnbrgetllad...

Red Hat Enterprise Linux Resource Management Vulnerability

In Red Hat Enterprise Linux versions 7, 8, 9, and 10, there is a resource management vulnerability in mutter. This vulnerability stems from issues with Wayland color management ICC image description paths, where resources are reclaimed after use. A local attacker can execute a malicious Wayland...

kickthemout

KickThemOut KickThemOut - Expulsa dispositivos de tu red Una herramienta para expulsar dispositivos de tu red y disfrutar de todo el ancho de banda para ti. Te permite seleccionar dispositivos específicos o todos y suplantar sus ARP para sacarlos de tu red de área local. Compatible con Python 3+...

CVE-2026-108682

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

EUVD-2026-97038

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

libtirpc: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decoding

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-108859

The mcp-go library (versions through 1.2.1 ) is vulnerable to a Denial of Service (DoS) attack within the StreamableHTTPServer.ServeHTTP component. The root cause is unbounded POST body buffering , where the application uses io.ReadAll to read request bodies fully before performing any validation...

hyenae-ng

Hyenae NG Hyenae NG Next Generation es una reescritura de la herramienta original Hyenae que fue publicada originalmente en el año 2010. Además de cambiar de C a C++, utilizando conceptos de diseño modernos, Hyenae NG fue al igual que el Hyenae original escrito pensando en la máxima portabilidad...

CVE-2026-108755

Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Attackers can send arbitrarily large or concurrent request bodies to POST /api/v1/sns/tenant/event with any UUID, which...