CVE-2026-127125

P-Net versions prior to 1.0.4 are vulnerable to a NULL pointer dereference during the handling of fragmented responses in an RPC session. The issue occurs because the software fails to verify the existence of an Application Relationship before processing a resent response fragment. Specifically, ...

EUVD-2026-125306

P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relationship that is sent on another activity...

EUVD-2026-125304

P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID, without a timeout, when the rest of the request never arrives. A session that does not get an Application Relationship is also kept after the response. Repeated fragments or...

CVE-2026-127124

P-Net versions prior to 1.0.4 are vulnerable to a denial of service (DoS) condition due to a resource exhaustion flaw in the RPC session pool. The software fails to implement a timeout for RPC sessions allocated to fragments of requests with unknown activity UUIDs, or for sessions lacking an Appl...

CVE-2026-127123

P-Net versions before 1.0.4 are vulnerable to an issue where an RPC session's Application Relationship is released without following the proper abort procedure. This occurs when a request fragment uses a different data representation (such as endianness ) than the initial fragment. The consequenc...

EUVD-2026-125303

P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data representation endianness than the first fragment of the call. The application is not told that the Application Relationship is gone, the cyclic...

CVE-2026-127122

P-Net versions prior to 1.0.4 are vulnerable to an out-of-bounds write because the software fails to validate the number of MCR request blocks in a Connect request against the allocated capacity (PNET_MAX_MC_CR ). An attacker with ADJACENT network access can provide excessive blocks, causing data...

EUVD-2026-125302

P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast communication relations that an Application Relationship has room for PNETMAXMCCR, 1 by default. Each further block is written past the end of the array, into the rest of the...

EUVD-2026-125301

P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network...

CVE-2026-124762

P-Net versions prior to 1.0.4 are vulnerable to an Origin Validation Error (CWE-346). The software identifies RPC sessions using only the activity UUID, failing to verify if a received reject, fault, or cancel PDU is a legitimate response or its true source. An attacker with ADJACENT network acce...

CVE-2026-124761

P-Net versions prior to 1.0.4 are vulnerable to an incorrect behavior order where the IP suite of a DCP Set request is saved to non-volatile configuration before the device state is validated. If a request is refused (e.g., due to an active Application Relationship), the configuration is not rest...

CVE-2026-124760

The P-Net software (versions prior to 1.0.4 ) is vulnerable to a flaw where a malformed alarm notification can cause the alarm receiver to stop delivering subsequent notifications of the same priority. The issue occurs because the system sets the receiver state to waiting for confirmation before ...

EUVD-2026-125299

P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification is parsed. If the parsing fails the state is not restored, and later alarm notifications of the same priority are discarded without acknowledge until the Application...

CVE-2026-124758

P-Net versions before 1.0.4 are vulnerable to an integer underflow within IODWrite requests targeting non-user record indices. The software fails to validate the record data length against the record block header size. When a 32-bit length smaller than the header is processed, it underflows to ap...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS, or Windows experimental. You have access to a remote network via ssh. You don't necessarily have admi...

minipwner

MiniPwner A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "drop box". What is the "MiniPwner"? The MiniPwner is a penetration testing "drop box". It is designed as a small, simple but powerful device that can be inconspicuously plugged into a...

CVE-2026-116417

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

EUVD-2026-125140

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

CVE-2026-116417

Dell PowerScale InsightIQ , versions 6.3.0 through 6.4.0, is susceptible to a Weak Password Requirements vulnerability (CWE-521). An unauthenticated attacker with adjacent network access could potentially exploit this flaw to achieve Information disclosure and Unauthorized access . Remediation is...

opnsense-captive-lastseen-roam

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-captive-lastseen-roam Write-up: https://abraxaslabs.tech/research/opnsense-captive-lastseen-roam opnsense-captive-lastseen-roam Class: Network-access bypass Reach: Remote OPNsense core 26.7.6 a842fe48 -...