CVE-2025-31161

CVE-2025-31161 Advertencia: Esta herramienta es solo para pruebas de seguridad autorizadas y fines educativos. El uso no autorizado contra sistemas para los que no tenga permiso explícito de prueba es ilegal. Resumen Esta herramienta es una prueba de concepto PoC para CVE-2025-31161 , una...

EUVD-2026-63095

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext...

Linux Distros Unpatched Vulnerability : CVE-2026-75595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode...

CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2TYPESSL TLV Type-Length-Value header. This can lead to an IndexOutOfBoundsException...