430 matches found
curl: Path Traversal in curl file:// Protocol Handler Allows Unauthorized File Access
Summary During my manual review of the file path handling logic in curl's source code, I noticed the absence of proper validation for directory traversal sequences, which I then verified through practical testing. I discovered that curl allows unauthorized access to arbitrary files through the...
curl: HTTP/3 Protocol Smuggling and Header Injection via CRLF in QPACK value conversion
A fundamental design flaw exists in how libcurl handles HTTP/3 QUIC response headers across all supported backends ngtcp2, quiche, openssl-quic. The vulnerability stems from the unsafe transcoding of binary QPACK headers HTTP/3 into the textual HTTP/1.1 format used internally by curl's pipeline...
FreyrSCADA Embedded Solution IEC 60870-5-104 Protocol 缓冲区错误漏洞
FreyrSCADA Embedded Solution IEC 60870-5-104 Protocol is a server emulator from FreyrSCADA Embedded Solution, Inc. A buffer error vulnerability exists in FreyrSCADA Embedded Solution IEC 60870-5-104 Protocol version v21.06.008, which stems from improper handling of a specific message sequence and...
CVE-2025-44005
An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...
CVE-2025-8872
On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...
The vulnerability of the `present_create_notifies` function in the implementation of the Wayland protocol for X.Org XWayland, as well as in the implementation of the X Window System Server, allows a malicious actor to execute arbitrary code or cause a service failure.
The vulnerability of the presentcreatenotifies function in the implementation of the Wayland protocol for X.Org XWayland, as well as in the implementation of the X Window System Server, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execut...
The vulnerability of the mptcp_schedule_work() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...
Universal Tool Calling Protocol 安全漏洞
Universal Tool Calling Protocol is an official python implementation library for UTCP in the Universal Tool Calling Protocol open source. A security vulnerability exists in Universal Tool Calling Protocol that originates when a client obtains the JSON specification of a tool from a remote Manual...
PT-2025-50010
Cross-Site Request Forgery CSRF vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through = 1.3.47...
The vulnerability of the mptcp_update_infinite_map() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel, which allows a attacker to cause a service failure.
The vulnerability of the mptcpupdateinfinitemap function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...
CVE-2025-66270
The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49...
CVE-2025-54849
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...
PT-2025-48479
Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service condition can occur in the Modbus TCP and Modbus RTU over TCP functionality. An attacker can trigger this by sending a sequence of unauthenticated network packets...
Automated Logic Zone Controllers 安全漏洞
Automated Logic Zone Controllers is a hardware controller in a building automation system from Automated Logic USA. A security vulnerability exists in Automated Logic Zone Controllers that stems from the BACnet protocol causing the device to crash and may require manual power cycling to recover...
UBUNTU-CVE-2025-66270
The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49...
Exploit for CVE-2025-13380
AI Engine for WordPress: ChatGPT, GPT Content Generator true,...
TencentOS Server 3: varnish (TSSA-2023:0259)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0259 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-61104
A flaw was found in frr. When the OSPF daemon ospfd is configured with the debug command "debug ospf packet all send/recv detail", it attempts to print detailed information about OSPF packets. However, a specially crafted OSPF packet can trigger a NULL pointer dereference in the showvtyunknowntlv...
LAPRAD: LLM-Assisted PRotocol Attack Discovery
With the goal of improving the security of Internet protocols, we seek faster, semi-automatic methods to discover new vulnerabilities in protocols such as DNS, BGP, and others. To this end, we introduce the LLM-Assisted Protocol Attack Discovery LAPRAD methodology, enabling security researchers...
