751 matches found
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
CVE-2026-22917
CVE-2026-22917 describes improper input handling in a system endpoint that may lead to resource exhaustion and a denial of service. The CVE is reflected in multiple feeds: NVD/Red Hat entries reiterate the same description and note a high availability impact (CVSS v3.1 base score 7.5) with networ...
PT-2026-2998
Name of the Vulnerable Software and Affected Versions versions prior to 2026-22917 Description Improper input handling in a system endpoint can lead to resource exhaustion and a denial of service. An attacker may be able to overload system resources, resulting in service disruption. Recommendatio...
golang: archive/tar: Unbounded allocation when parsing GNU sparse map
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go...
CVE-2025-66471
CVE-2025-66471 affects urllib3’s streaming API handling of compressed HTTP responses in Python. The issue arises when streaming a highly compressed payload, where decompression could process data in a way that uses excessive CPU and memory, potentially from the decompression buffer behavior noted...
3 SOC Challenges You Need to Solve Before 2026
2026 will mark a pivotal shift in cybersecurity. Threat actors are moving from experimenting with AI to making it their primary weapon, using it to scale attacks, automate reconnaissance, and craft hyper-realistic social engineering campaigns. The Storm on the Horizon Global world instability,...
python-kdcproxy: Remote DoS via unbounded TCP upstream buffering
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...
Why SOC Burnout Can Be Avoided: Practical Steps
Behind every alert is an analyst; tired eyes scanning dashboards, long nights spent on false positives, and the constant fear of missing something big. It's no surprise that many SOCs face burnout before they face their next breach. But this doesn't have to be the norm. The path out isn't through...
CVE-2025-61725 Excessive CPU consumption in ParseAddress in net/mail
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...
PT-2025-42622
Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.4.1 Description OpenBao is an open source identity-based secrets management system. Versions prior to 2.4.1 are susceptible to a denial of service condition. Specifically, crafted JSON payloads can cause excessive...
UBUNTU-CVE-2025-11568
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...
EUVD-2025-33399
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to cause impact to confidentiality and availability. When an output firewall filter is...
EUVD-2021-0561
Malware in sbrugna...
EUVD-2013-2040
Malware in sbrugna...
EUVD-2016-7948
Malware in sbrugna...
EUVD-2020-13035
Malware in sbrugna...
EUVD-2018-1155
Malware in sbrugna...