http-stalling-detector

HTTP Stalling Detector HTTPスタリング型DoS攻撃は、Webサーバーが、リモートクライアントが単に 低速リンク経由で接続しているだけなのか、それともWebサーバーがローカル システムリソースを保護するためにタイムアウトして接続を切断するのを 防ぐべく、意図的にデータを非常にゆっくり送信しているのかを判別できない という特性を悪用します。攻撃者に典型的に見られる挙動は、多数の接続を 開き、Webサーバーが接続をタイムアウトさせないようにデータを少しずつ ゆっくり送り出すことです。Webサーバーが比較的小規模なワーカープールを...

CVE-2026-97523

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

EUVD-2026-86831

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

CVE-2026-97523

The Linux kernel is affected by a race condition within the mptcp component. Specifically, the mptcp scheduler may race with a subflow sockets state change , causing data transmission on a selected socket to fail. This failure can lead to a subsequent release attempting to use mss_now reset to 0 ...

ROS-20260921-73-0036

The vulnerability in curl is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel, related to the disclosure of information during data transmission, allows a perpetrator to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to the exposure of information during data transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software lies in their susceptibility to information disclosure during data transmission. This vulnerability allows attackers to expose confidential information that should be protected.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

CVE-2026-58301: Server-Side Request Forgery (SSRF)

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of a reply packet before data transmission. rxrpcreceivingreply was fixed to handle the reception of a reply packet before rxrpc has a chance to send any request DATA packets during a client call. Thi...

CVE-2026-74429 rxrpc: Fix the reception of a reply packet before data transmission

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call ...

ROS-20260813-73-0053

The vulnerability in Golang is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

EUVD-2026-52261

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information...

CVE-2026-67318 axios 1.13.0 before 1.18.0 maxBodyLength Bypass via HTTP/2

axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request API does not honor the maxBodyLength option and axios's byte-counting stream wrapper is gated on...

The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.

The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

CVE-2026-64742

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64742

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64175

A flaw was found in the Linux kernel's iwlwifi driver. When the Wi-Fi firmware crashes, the driver continues to process network transmission requests inefficiently. This creates a continuous loop of attempting to send data through an unresponsive firmware, consuming excessive CPU resources and...

SUSE-SU-2026:22692-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....

MAL-2026-10086 Malicious code in dl-pp-latm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21f1adb71c41838848c4d4292830a9738895d32a5b0f1f098e1efdadb233716 Package [email protected] registers both preinstall and postinstall lifecycle hooks that run index.js, which collects installer machine identifiers —...

ROS-20260707-73-0032

The vulnerability in Python-Django is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...