webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

DEBIAN-CVE-2026-115353

Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute paths. Attackers can submit markdown containing include directives referencing ../ sequences or absolute paths to embed sensiti...

CVE-2026-115353 Mistune before 3.3.0 Path Traversal via include Directive

Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute paths. Attackers can submit markdown containing include directives referencing ../ sequences or absolute paths to embed sensiti...

EUVD-2026-108422

Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute paths. Attackers can submit markdown containing include directives referencing ../ sequences or absolute paths to embed sensiti...

CVE-2026-115353

The Mistune markdown processor (versions before 3.3.0 ) is vulnerable to a path traversal vulnerability in the RST include directive . An attacker can exploit this by submitting markdown containing include directives with relative paths (e.g., ../ sequences) or absolute paths . This allows the at...

chaos

chaos chaos es un escáner de IP de 'origen' desarrollado por RST en colaboración con ChatGPT. Es una utilidad de nicho con una audiencia prevista de probadores de penetración y cazadores de bugs principalmente. Una IP de origen es una expresión técnica que describe la dirección IP pública final...

webscan

webscan webscan es un escáner de IP de red basado en navegador y detector de IP local. Detecta IPs vinculadas al usuario/víctima escuchando en un canal de datos RTP a través de WebRTC y realizando un bucle de retorno al puerto a través de cualquier IP activa, así como descubriendo todas las...

CLEANSTART-2026-UI43314 When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately

Security vulnerability affects the apache2 package. When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources were not reclaimed immediately...

ROOT-APP-PYPI-AIKIDO-2026-826619 AIKIDO-2026-826619 in rich-rst - Patched by Root

Root has patched AIKIDO-2026-826619 in the rich-rst package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-AIKIDO-2026-387556 AIKIDO-2026-387556 in rich-rst - Patched by Root

Root has patched AIKIDO-2026-387556 in the rich-rst package for Root:PyPI. Multiple fixed versions available...

AlmaLinux 9.2 [TuxCare] Security Update: mod_http2 (ALMALINUX9.2:CLSA-2026:1778873714)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778873714 advisory. - When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources were not reclaimed...

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

Astra Linux – Vulnerability in Jetty9

In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, and =12.1.0alpha2, an HTTP/2 client may trigger the server to send RSTSTREAM frames. This can happen by sending frames that are malformed or should not be sent under certain stream states, thereby forcing the server to consume...

Linux Distros Unpatched Vulnerability : CVE-2026-57226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF...

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099988 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An...

SUSE CVE-2026-68118

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

CVE-2026-68118

A flaw was found in the Linux kernel's handling of TCP Transmission Control Protocol connections. A remote attacker could send a specially crafted TCP Reset RST packet during the SYN-RECEIVED state. This could cause the system to prematurely remove connection requests instead of issuing a challen...

AZL-95003 CVE-2026-68118 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...