Lucene search
+L

464 matches found

Packet Storm News
Packet Storm News
•added 2026/03/28 12:00 a.m.•31 views

Quantum Bit Error Rate Analysis in BB84 Quantum Key Distribution: Measurement, Statistical Estimation, and Eavesdropping Detection

Quantum Key Distribution QKD provides information-theoretic security by exploiting the principles of quantum mechanics. Among QKD protocols, the BB84 scheme remains the most widely adopted for both theoretical research and practical implementation. A critical parameter determining the reliability...

6AI score
SaveExploits0
attackerkb
attackerkb
•added 2026/03/20 9:35 p.m.•8 views

CVE-2026-32887

Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript applications. Prior to version 3.20.0, when using RpcServer.toWebHandler or HttpApp.toWebHandlerRuntime inside a Next.js App Router route handler, any Node.js AsyncLocalStorage-dependent...

7.4CVSS5.9AI score0.00272EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/03/20 8:34 p.m.•39 views

GHSA-38F7-945M-QR2G Effect `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC

Versions - effect: 3.19.15 - @effect/rpc: 0.72.1 - @effect/platform: 0.94.2 - Node.js: v22.20.0 - Vercel runtime with Fluid compute - Next.js: 16 App Router - @clerk/nextjs: 6.x Root cause Effect's MixedScheduler batches fiber continuations and drains them inside a single microtask or timer...

7.4CVSS5.9AI score0.00272EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/03/20 8:34 p.m.•17 views

Effect `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC

Versions - effect: 3.19.15 - @effect/rpc: 0.72.1 - @effect/platform: 0.94.2 - Node.js: v22.20.0 - Vercel runtime with Fluid compute - Next.js: 16 App Router - @clerk/nextjs: 6.x Root cause Effect's MixedScheduler batches fiber continuations and drains them inside a single microtask or timer...

7.4CVSS5.9AI score0.00272EPSS
SaveExploits1References3Affected Software1
Packet Storm News
Packet Storm News
•added 2026/03/11 12:00 a.m.•16 views

QuaNTUM: A Modular Quantum Communication Testbed for Scalable Fiber and Satellite Integration

Secure communication is essential for modern society, from financial transactions to critical infrastructure. As classical encryption faces threats from advancing computational power, quantum communication provides a fundamentally secure alternative based on physical laws. We present QuaNTUM...

5.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/03/05 6:55 a.m.•13 views

SUSE CVE-2025-66630

Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID functions, application code may...

9.4CVSS8AI score0.00535EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/04 12:26 a.m.•12 views

SUSE CVE-2026-25882

Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sending requests to routes with more than 30 parameters. The vulnerability results from missing validation during route...

7.5CVSS8.1AI score0.00826EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/04 12:26 a.m.•13 views

SUSE CVE-2026-25891

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS8AI score0.00707EPSS
SaveExploits1References3
CNVD
CNVD
•added 2026/03/04 12:00 a.m.•18 views

Fiber Security Feature Issue Vulnerability

Fiber is Fiber open source an open source Web framework written in Go language . Fiber suffers from a security signature issue vulnerability. The vulnerability stems from an error not returned by the UUID function and can be exploited by an attacker to use predictable or low entropy identifiers i...

9.4CVSS8.2AI score0.00535EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/03/01 12:00 a.m.•13 views

Power Network SCADA Quantum Communications: A Comparison of BB84, B92, E91, and SGS04 Quantum Key Distribution Protocols

The current state, emerging trends, and practical challenges of optical fiber-based power network SCADA quantum communication must be addressed to fully utilise the technological platform's potential in real-world power system SCADA communications involving massive volumes of real-time data, as...

5.9AI score
SaveExploits0
OSV
OSV
•added 2026/02/26 4:27 p.m.•25 views

GO-2026-4540 Fiber has an Arbitrary File Read in Static Middleware on Windows in github.com/gofiber/fiber/v3

Fiber has an Arbitrary File Read in Static Middleware on Windows in github.com/gofiber/fiber/v3...

8.7CVSS8AI score0.00707EPSS
SaveExploits1References3
OSV
OSV
•added 2026/02/26 4:27 p.m.•22 views

GO-2026-4534 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation in github.com/gofiber/fiber/v3

Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation in github.com/gofiber/fiber/v3...

7.5CVSS8AI score0.00645EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/02/25 10:17 p.m.•19 views

CVE-2026-25899

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS7.8AI score0.00645EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/25 10:17 p.m.•15 views

CVE-2026-25891

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS8AI score0.00707EPSS
SaveExploits1References1
Snyk
Snyk
•added 2026/02/25 12:12 a.m.•9 views

Improper Validation of Array Index

Overview github.com/gofiber/fiber/v3 is an Express inspired web framework written in Go. Affected versions of this package are vulnerable to Improper Validation of Array Index via the route registration process. An attacker can cause the application to crash by sending requests to routes containi...

8.7CVSS7.9AI score0.00826EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/02/25 12:12 a.m.•4 views

Improper Validation of Array Index

Overview github.com/gofiber/fiber is an Express inspired web framework written in Go. Affected versions of this package are vulnerable to Improper Validation of Array Index via the route registration process. An attacker can cause the application to crash by sending requests to routes containing...

8.7CVSS7.9AI score0.00826EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/24 10:16 p.m.•27 views

CVE-2026-25899

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS0.00645EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/24 10:16 p.m.•28 views

CVE-2026-25891

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS0.00707EPSS
SaveExploits1References3
NVD
NVD
•added 2026/02/24 9:16 p.m.•25 views

CVE-2026-25882

Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sending requests to routes with more than 30 parameters. The vulnerability results from missing validation during route...

7.5CVSS0.00826EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/24 9:11 p.m.•35 views

CVE-2026-25899 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS0.00645EPSS
SaveExploits1References2
Rows per page
Query Builder