Lucene search
+L

170 matches found

Kitploit
Kitploit
added 2026/09/02 10:04 a.m.6 views

CVE-2026-20127

CVE-2026-20127 Resumen Un exploit para la vulnerabilidad de omisión de autenticación en Cisco Catalyst SD-WAN Controller, CVE-2026-20127. Este exploit ataca el manejador vbondprocchallengeackack. Envía un mensaje CHALLENGEACKACK falsificado msgtype=10 con un byte verifystatus=1 controlado por el...

10CVSS7.4AI score0.88243EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 3:13 a.m.3 views

CVE-2026-20127-Exploit-Extension

Resumen Ejecutivo El Defensor Complementario de CVE-2026-20127 es una extensión de navegador premium de nivel empresarial diseñada para inteligencia de amenazas proactiva y análisis defensivo. Esta herramienta encapsula investigación técnica autorizada sobre la vulnerabilidad de omisión de...

10CVSS7.4AI score0.88243EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/31 3:50 a.m.6 views

CVE-2026-20182

CVE-2026-20182 — Bypass de Autenticación en Cisco Catalyst SD-WAN Controller / Manager Un exploit de prueba de concepto para CVE-2026-20182 , un bypass de autenticación crítico CVSS 10.0 en el servicio vdaemon DTLS UDP/12346 en Cisco Catalyst SD-WAN Controller vSmart y Manager vManage. Divulgado:...

10CVSS7.4AI score0.91522EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2026/08/25 4:57 p.m.9 views

CVE-2026-54874

A flaw was found in OpenSSL. Receiving a DTLS Datagram Transport Layer Security record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a...

7.5CVSS5.1AI score0.00516EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/08/25 12:59 p.m.9 views

CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

7.5CVSS6AI score0.00516EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/25 8:39 a.m.8 views

CVE-2026-59646

A flaw was found in Bouncy Castle for Java. The DTLS Datagram Transport Layer Security handshake reassembler allocates buffers based on an unchecked 24-bit length value. A remote attacker could exploit this vulnerability by sending a specially crafted DTLS handshake message, leading to excessive...

8.7CVSS5AI score0.00353EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.14 views

PT-2026-81301

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 4.0 Description Receiving a DTLS record for a future epoch during a handshake causes the system to buffer significantly more memory than the record requires. This occurs because the software retains the entire re...

7.5CVSS6.3AI score0.0133EPSS
SaveExploits0References41
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-54874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself...

7.5CVSS6.1AI score0.00516EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.11 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.14)

The version of AOS installed on the remote host is prior to 7.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.14 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

9.8CVSS6.3AI score0.01874EPSS
SaveExploits2References19
RedHat Linux
RedHat Linux
added 2026/08/10 4:56 p.m.11 views

openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...

5.3CVSS7.1AI score0.00289EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/04 11:08 p.m.12 views

openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...

5.3CVSS7.1AI score0.00289EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:00 a.m.11 views

Amazon Linux 2023 : gstreamer1-plugin-openh264, gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-devel (ALAS2023-2026-1994)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1994 advisory. A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte heap...

7.5CVSS7.8AI score0.00577EPSS
SaveExploits0References8
Snyk
Snyk
added 2026/08/03 3:53 a.m.11 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00353EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.11 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00353EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.11 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00353EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.11 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00353EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/03 1:16 a.m.8 views

CVE-2026-59646

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS5.2AI score0.00353EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/03 12:48 a.m.15 views

CVE-2026-59646

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS5.6AI score0.00353EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/03 12:48 a.m.67 views

CVE-2026-59646 DTLS handshake reassembler allocates buffer from unchecked 24-bit length

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS0.00353EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/03 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-59646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java...

8.7CVSS6AI score0.00353EPSS
SaveExploits0References3
Rows per page
Query Builder