PT-2026-38462

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

n8n-MCP 代码问题漏洞

n8n-MCP is a model context protocol server developed by Romuald Członkowski, an individual developer. There are code vulnerabilities in versions 2.47.4 to 2.47.13 of n8n-MCP. These vulnerabilities stem from the fact that the SSRFRProtection.validateUrlSync URL verifier does not check IPv6...

MAXHUB Pivot client application 加密问题漏洞

The MAXHUB Pivot client application is a client component of the MAXHUB company’s device management platform. Versions of the MAXHUB Pivot client application prior to 1.36.2 contained an encryption vulnerability. This vulnerability stemmed from the hardcoded AES key within the application. It cou...

GoBGP 代码问题漏洞

GoBGP is an open-source implementation of the Border Gateway Protocol BGP developed by osrg. Version 4.3.0 of GoBGP contains a code vulnerability that arises from a null pointer dereferencing during the processing of malformed BGP UPDATE messages containing unrecognized Well-known path attributes...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-016496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016496 advisory. In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as...

The vulnerability of MySQL protocol discrivers and traffic analyzers for computer networks by Wireshark allows attackers to cause service failures.

The vulnerability of the MySQL protocol analyzer and traffic analyzer for computer networks by Wireshark is related to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the spotlight_dissect_query_loop() function in the AFP Spotlight protocol analyzer for computer network traffic analysis tools by Wireshark allows a hacker to induce a service failure.

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of the dissect_icmpv6_nd_opt() function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissecticmpv6ndopt function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the rdp8_decompress_segment() function in the RDP protocol allows a hacker to cause a service failure. This vulnerability exists in the Wireshark network traffic analyzer software.

The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...

TencentOS Server 2: squid (TSSA-2026:0280)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0280 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

The vulnerability of the GNW protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the GNW protocol analyzer, a component of the Wireshark computer network traffic analyzer, lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the DLMS/COSEM protocol analyzer of the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the DLMS/COSEM protocol implementation in the Wireshark network traffic analyzer involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the WebSocket protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the WebSocket protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability in the packet-gsm_a_rp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability in the packet-gsmarp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark relates to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-41643

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Service DoS vulnerability exists in GoBGP where a malformed BGP UPDATE message can trigger a runtime error: index out of range panic. This occurs during th...

CVE-2026-42285

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent...

ldap3_proto has LDAP Filter stack exhaustion

Impact LDAP queries are not validated for depth, which can cause the parser both PEG and ASN to exhaust the stack. This may cause a denial of service in applications that process queries. Workarounds N/A References Related to GHSA-r5fr-9gmv-jggh...

GHSA-QCXQ-75WR-5CM8 ldap3_proto has LDAP Filter stack exhaustion

Impact LDAP queries are not validated for depth, which can cause the parser both PEG and ASN to exhaust the stack. This may cause a denial of service in applications that process queries. Workarounds N/A References Related to GHSA-r5fr-9gmv-jggh...

NPM: Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules

NPM: Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules vulnerability discovered by ? in WordPress Npm nitropack versions 2.13.4...

Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules

A redirect route rule like: ts routeRules: "/legacy/": redirect: "/" is intended to rewrite paths within the same host. Before the patch, an attacker could turn the rewrite into a cross-host redirect by sliding an extra slash in after the rule prefix. Example exploit: GET /legacy//evil.com Nitro...