279 matches found
CVE-2026-4253-Scanner
CVE-2026-42530 — Safe-Check Scanner Nicht-destruktiver Massen-Scanner für den NGINX HTTP/3 QUIC Use-after-Free Ermitteln Sie, welche Ihrer Hosts exponiert sind – ohne den Fehler jemals auszulösen. ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für autorisierte Sicherheitstests bestimmt – für...
openssl
Benvenuti al Progetto OpenSSL OpenSSL è un toolkit open source robusto, di livello commerciale e completo per i protocolli Transport Layer Security TLS, ex SSL, Datagram TLS DTLS e QUIC. Le implementazioni dei protocolli sono basate su una libreria crittografica general-purpose di piena potenza,...
ssh3
!NOTE SSH3 provavelmente vai mudar de nome. Ainda é o Protocolo de Conexão SSH RFC4254 rodando sobre HTTP/3 Extended connect, mas as mudanças necessárias são pesadas e muito distantes da filosofia das implementações populares de SSH para serem consideradas para integração. O rascunho de...
CVE-2025-54939
LSQUIC में QUIC-LEAK CVE-2025-54939 के लिए PoC अवलोकन यह PoC LSQUIC QUIC कार्यान्वयन में प्री-हैंडशेक मेमोरी समाप्ति सेवा से वंचित भेद्यता CVE-2025-54939 को उजागर करता है। यह समस्या, जिसे QUIC-LEAK नाम दिया गया है, सबसे पहले Imperva द्वारा प्रलेखित की गई थी:...
CVE-2026-78966
A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...
openssl: QUIC ACK-only packet retention can cause memory exhaustion
A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...
CVE-2026-63075
A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...
CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass
CVE-2026-6060 – एड्रेस सत्यापन बाईपास के ज़रिए QUIC हैंडशेक एम्प्लीफिकेशन प्रोग्राम कोड Python सिमुलेशन root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating sour...
PT-2026-81524
Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
OpenSSL -- Multiple vulnerabilities
The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...
CVE-2026-63075
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion...
CVE-2026-25800
A flaw was found in Quinn, a Rust implementation of the QUIC transport protocol. A remote attacker can exploit this vulnerability by sending specially crafted QUIC stream fragments with many gaps. This can lead to high buffer overhead in the Assembler component, causing memory exhaustion and a...
CVE-2026-17673
Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-17733
Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17733
In Chrome on Android, CVE-2026-17733 is tied to an inappropriate QUIC implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected product/component: Google Chrome (Android) with QUIC; root cause: insecure QUIC handling leading to cross-origin data...
CVE-2026-17673
CVE-2026-17673: An integer overflow in QUIC within Google Chrome’s renderer can, via a crafted HTML page, potentially allow a sandbox escape. Affected: Google Chrome (desktop) prior to 151.0.7922.72. Root cause: integer overflow in QUIC handling. Impact: remote code execution with sandbox escape ...
PT-2026-65992
Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-25800
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler...
Astra Linux – Vulnerability in Chromium
Using “after free” in QUIC in Google Chrome before version 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption through malicious network traffic. Chromium security severity: High...
