CVE-2026-88778

Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a TCP Initial Sequence Number (ISN) prediction flaw. The issue affects appliances with TCP-based virtual servers (such as HTTP, SSL, or TCP) where Enhanced ISN Generation is disabled. This vulnerability allows for predictable sequence n...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...

CVE-2026-64024

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

CVE-2026-64024: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

AZL-90642 CVE-2026-53249 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...

MAL-2025-98515 Malicious code in wibowo-wajit17-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c77145762cbe64ad10c19daa85589596245859d6b4d38caddc97de63a62f2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2018-19088

Malware in sbrugna...

EUVD-2020-20137

Malware in sbrugna...

EUVD-2020-20142

Malware in sbrugna...

EUVD-2020-23344

Malware in sbrugna...

EUVD-2015-3994

Malware in sbrugna...

EUVD-2020-20139

Malware in sbrugna...

EUVD-2021-32254

Malicious code in bioql PyPI...

EUVD-2024-32906

Malicious code in bioql PyPI...

CVE-2020-35685

An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

CVE-2024-10604: Use of Insufficiently Random Values

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

isn-t.it Improper Access Control vulnerability OBB-3840907

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-45236: Exposure of Sensitive Information to an Unauthorized Actor

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...