dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

CVE-2026-75108

Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can call these endpoints with arbitrary asset identifiers to retrieve asset information...

CVE-2026-75108 Next Terminal Missing Per-Asset Authorization on Portal Endpoints

Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can call these endpoints with arbitrary asset identifiers to retrieve asset information...

CVE-2026-75108: Missing Authorization

Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can call these endpoints with arbitrary asset identifiers to retrieve asset information...

PT-2026-76802

Name of the Vulnerable Software and Affected Versions Next Terminal affected versions not specified Description Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints. This allows any authenticated user to probe and wake assets they are not...

Malicious code in @zalastax/nolb-ping (npm)

The package @zalastax/nolb-ping was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-72568

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...

Redis 8.8.1 Heap Out-Of-Bounds Read

A proof of concept exploit for a heap out-of-bounds read vulnerability in Redis version 8.8.1. The vulnerability exists in Redis Cluster bus PING/PONG/MEET hostname extensions, where a hostname payload lacking a required NUL terminator can cause Redis to read beyond the end of the receive buffer...

CVE-2026-72568

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...

UBUNTU-CVE-2026-72568

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...

CVE-2026-72568

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...

CVE-2026-72568

Red Hat CNA-LR concluded that this CVE is not valid...

EUVD-2026-55238

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...

CVE-2026-72568

Removed by vendor...

CVE-2026-72568

...

CVE-2026-72568

...

CVE-2026-72568

Red Hat CNA-LR concluded this CVE is not valid; no patch, advisory, or technical details are present in any connected document, so this CVE ID is rejected/not used and does not represent an active vulnerability entry.

GPON Home Router - Diag Form RCE Detection (CVE-2018-10561)

Detects CVE-2018-10561/10562 by injecting a non-existent command via diag ping and checking diag.html for shell error or BusyBox overwrite. !/usr/bin/env python3 -- coding: utf-8 -- """GPON Home Router diagnostic form command injection CVE-2018-10561/10562.""" import time from kittysploit import...

GPON Home Router - Diag Form RCE (CVE-2018-10561)

Exploits command injection in GPON diagnostic ping desthost backticks. Command output is retrieved from /diag.html after a short delay. !/usr/bin/env python3 -- coding: utf-8 -- """GPON Home Router diag form RCE CVE-2018-10561/10562 — opens execute session.""" import re import time from kittysplo...