openssl

OpenSSL परियोजना में आपका स्वागत है OpenSSL एक मजबूत, व्यावसायिक-श्रेणी का, पूर्ण-विशेषताओं वाला ओपन सोर्स टूलकिट है ट्रांसपोर्ट लेयर सिक्योरिटी TLS, पूर्व में SSL, डेटाग्राम TLS DTLS, और QUIC प्रोटोकॉल के लिए। प्रोटोकॉल कार्यान्वयन एक पूर्ण-शक्ति वाली सामान्य प्रयोजन क्रिप्टोग्राफिक लाइब्रेरी पर...

ssh3

!NOTE SSH3 संभवतः अपना नाम बदलने वाला है। यह अभी भी HTTP/3 Extended connect के ऊपर चलने वाला SSH कनेक्शन प्रोटोकॉल RFC4254 है, लेकिन आवश्यक परिवर्तन भारी हैं और लोकप्रिय SSH कार्यान्वयनों के दर्शन से बहुत दूर हैं जिन्हें एकीकरण के लिए माना जा सके। विनिर्देश मसौदा का नाम पहले ही बदल दिया गया है...

CVE-2025-54939

PoC لـ QUIC-LEAK CVE-2025-54939 في LSQUIC نظرة عامة يسلط هذا PoC الضوء على CVE-2025-54939، وهو ثغرة استنزاف للذاكرة قبل المصافحة رفض الخدمة في تطبيق LSQUIC لبروتوكول QUIC. المشكلة، المسماة QUIC-LEAK، تم توثيقها لأول مرة بواسطة Imperva:...

USN-8678-3: OpenSSL vulnerability

USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – تضخيم مصافحة QUIC عبر تجاوز التحقق من العنوان الكود البرمجي محاكاة بايثون root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating source address In...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner ماسح جماعي غير تدميري لثغرة use-after-free في NGINX HTTP/3 QUIC اعرف أيًّا من مضيفاتك مكشوف للثغرة — دون تشغيلها إطلاقًا. ⚠️ إخلاء مسؤولية هذه الأداة مخصّصة لاختبارات الأمان المصرَّح بها فقط — أي بنيتك التحتية الخاصة، أو أنظمة لديك إذن كتابي صريح لاختبارها. وهي...

CVE-2026-78966

A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...

openssl: QUIC ACK-only packet retention can cause memory exhaustion

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

CVE-2026-63075

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

PT-2026-81524

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the QUIC protocol, which is a transport layer network protocol designed to reduce connection latency. A remote attacker can leak sensitive information by...

OpenSSL -- Multiple vulnerabilities

The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...

CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

CVE-2026-25800

A flaw was found in Quinn, a Rust implementation of the QUIC transport protocol. A remote attacker can exploit this vulnerability by sending specially crafted QUIC stream fragments with many gaps. This can lead to high buffer overhead in the Assembler component, causing memory exhaustion and a...

CVE-2026-17673

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17733

Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17733

In Chrome on Android, CVE-2026-17733 is tied to an inappropriate QUIC implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected product/component: Google Chrome (Android) with QUIC; root cause: insecure QUIC handling leading to cross-origin data...

CVE-2026-17673

CVE-2026-17673: An integer overflow in QUIC within Google Chrome’s renderer can, via a crafted HTML page, potentially allow a sandbox escape. Affected: Google Chrome (desktop) prior to 151.0.7922.72. Root cause: integer overflow in QUIC handling. Impact: remote code execution with sandbox escape ...

PT-2026-65992

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-25800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler...

Astra Linux – Vulnerability in Chromium

Using “after free” in QUIC in Google Chrome before version 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption through malicious network traffic. Chromium security severity: High...