410347 matches found
crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...
net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion
A flaw was found in the Go net/http package. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 requests that declare an excessive number of trailer header fields. Because the server bypasses configured header limits when allocating memory for these declarations, an attacker...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
Exploit for CVE-2026-109618
php2shell-CVE-2026-109618-CVE-2026-109619-recon-exploitation-t...
PHP2Shell-Lifecycle-Analysis
PHP2Shell: Before the First Line of PHP Analysis of the re...
crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...
net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion
A flaw was found in the Go net/http package. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 requests that declare an excessive number of trailer header fields. Because the server bypasses configured header limits when allocating memory for these declarations, an attacker...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
CVE-2026-98627
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When verifying packet pointer registers that share an identifier, the BPF verifier fails to preserve register displacement during state pruning. A local user with permission to load BPF programs could exploit this...
CVE-2026-98621
A flaw was found in the Linux kernel's Generic UDP Encapsulation GUE networking component. A remote attacker could exploit this vulnerability by sending specially crafted network packets containing invalid remote checksum offsets. This improper input validation causes an integer underflow, allowi...
crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...
net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion
A flaw was found in the Go net/http package. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 requests that declare an excessive number of trailer header fields. Because the server bypasses configured header limits when allocating memory for these declarations, an attacker...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
Exploit for CVE-2026-109618
CVE-2026-109618 Affected-Version Checker Non-destructive chec...
DEBIAN-CVE-2026-109618
PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...
AZL-109815 CVE-2026-109618 affecting package php for versions less than 8.3.35-2
PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...
Exploit for CVE-2026-109619
CVE-2026-109619 Affected-Version Checker Non-destructive chec...
[SECURITY] [DLA 4848-1] php8.2 security update
Debian LTS Advisory DLA-4848-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 21, 2026 https://wiki.debian.org/LTS Package : php8.2 Version : 8.2.35-1deb12u1 CVE ID : CVE-2026-109618 CVE-2026-109619 Two critical vulnerabilities were found in PHP, a...
vulnerabilities handled in PHP
PHP has two critical vulnerabilities. These vulnerabilities can be exploited without authentication to execute arbitrary code. All PHP installations that process web requests are affected. The vulnerability with the identifier CVE-2026-109618 involves memory corruption during the handling of an...
OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing
A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker or local user could exploit this vulnerability by providing a specially crafted B44 or B44A EXR file. This crafted file can cause an out-of-bounds write during file decoding, which may lead to...