tproxy

tproxy English | 简体中文 | 日本語 なぜこのツールを書いたのか バックエンドサービスを開発し、go-zeroを書くとき、ネットワークトラフィックを監視する必要がよくあります。例えば： 1. gRPC接続の監視、接続のタイミングと再接続のタイミング 2. MySQL接続プールの監視、接続数とライフタイムポリシーの把握 3. 任意のTCP接続のリアルタイム監視 インストール $ go install github.com/kevwan/tproxy@latest または、dockerイメージを使用します： $ docker run --rm -it -p : -p :...

PoolParty

PoolParty Windows 스레드 풀을 악용한 완전 탐지 불가 프로세스 인젝션 기법 모음입니다. Black Hat EU 2023 브리핑에서 당신이 절대 잊지 못할 Pool Party: Windows 스레드 풀을 이용한 새로운 프로세스 인젝션 기법이라는 제목으로 발표되었습니다. PoolParty 변종 변종 ID| 변종 설명 ---|--- 1| 대상 worker factory의 시작 루틴 덮어쓰기 2| 대상 프로세스 스레드 풀에 TPWORK 작업 항목 삽입 3| 대상 프로세스 스레드 풀에 TPWAIT 작업 항목 삽입 4| 대...

DEBIAN-CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

AZL-104450 CVE-2026-100076 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

UBUNTU-CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

EUVD-2026-87056

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

CVE-2026-100076

A memory leak vulnerability exists in the Linux kernel 's rtl8723bs wireless network driver. The driver fails to release allocated transmission frames and buffers back to their memory pools when encountering specific error paths during management frame handling, such as when a beacon exceeds 512 ...

CVE-2026-100076 staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

CVE-2026-100076: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

EUVD-2026-84219

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 4...

CVE-2026-94625

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 4...

CVE-2026-94625 vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 4...

CVE-2026-94625 vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 4...

SUSE CVE-2026-88012

Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPoints..transport.respondingTimeouts.readTimeout because the timeout is enforced on a TCP connection and the HTTP/3 server has no corresponding QUIC stream...

PT-2026-96315

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description A resource exhaustion issue exists in the MooncakeConnector component. Rejected prefill requests generate ownerless transfer placeholders that are not reclaimed by the system. An attacker can exploit...

CVE-2026-94625: Missing Release of Resource after Effective Lifetime

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 4...

Linux Distros Unpatched Vulnerability : CVE-2026-90233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is...

DEBIAN-CVE-2026-90371

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMADC buffer recycling race The RXDMADC buffers come from the RRO data queues' page pools, which are bound to a different NAPI, so the direct page-pool recycle used here could race the owning NAPI; take the...