replica

REPLICA TAME THE DRAGON ✨Features ⚡ Disassemble missed instructions - Define code that Ghidra's auto analysis missed ⚡ Detect and fix missed functions - Define functions that Ghidra's auto analysis missed ⚡ Fix 'undefinedN' datatypes - Enhance Disassembly and Decompilation by fixing 'undefinedN'...

Redis < 7.2.14 / 7.4.x < 7.4.9 / 8.2.x < 8.2.6 / 8.4.x < 8.4.3 / 8.6.x < 8.6.3 / 8.8.x < 8.8-RC1 Multiple Vulnerabilities

The version of Redis installed on the remote host is prior to 7.2.14, or 7.4.x prior to 7.4.9, or 8.2.x prior to 8.2.6, or 8.4.x prior to 8.4.3, or 8.6.x prior to 8.6.3, or 8.8.x prior to 8.8-RC1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in...

Astra Linux – Vulnerability in Redis

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command specifically, a SET command. NOTE: this issue was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have any safety guarantees related to...

Apache ResilientDB 1.12.0 Uncontrolled Memory Allocation Denial of Service

Apache ResilientDB version 1.12.0 contains a pre-authentication uncontrolled memory allocation vulnerability in the replica TCP acceptor that allows remote denial of service via a crafted length prefix. !/usr/bin/env python Apache ResilientDB 1.12.0 Uncontrolled Memory Allocation DoS Vendor: The...

Apache ResilientDB 1.12.0 Uncontrolled Memory Allocation DoS

Summary Apache ResilientDB is a High Throughput Yielding Permissioned Blockchain Fabric founded by ExpoLab at UC Davis in 2018. ResilientDB advocates a system-centric design by implementing a multi-threaded architecture with deep pipelines. Further, ResilientDB separates the ordering of client...

CVE-2026-25589-25588-25243-23631-23479-REDIS

GUIDE TO CHECKING & REMEDIATING 5 REDIS CVEs AS OF 2026.05.08 Release date: 2026-05-08 Author: TonyCao [email protected] Source: Redis Security Advisory TABLE OF CONTENTS 1. Overview 2. Affected Versions 3. Details of Each CVE CVE-2026-23479 — Use-after-free in Unblock Client Flow...

CVE-2026-106040

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the cororpc master port can evict DISK replicas across all tenants,...

CVE-2026-106040 Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the cororpc master port can evict DISK replicas across all tenants,...

CVE-2026-106040

Mooncake Store master through version 0.3.13.post1 is susceptible to a missing authorization vulnerability (CWE-862) within the EvictDiskReplica and BatchEvictDiskReplica functions. Unauthenticated attackers capable of reaching the coro_rpc master port can evict DISK replicas across all tenants. ...

CVE-2026-106040 Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the cororpc master port can evict DISK replicas across all tenants,...

CVE-2026-106041

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to inject completed LOCALDISK replicas through the NotifyOffloadSuccess RPC. Attackers can mount a local disk segment with a self-chosen client UUID, then attach replica...

PT-2026-106744

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the coro rpc master port can evict DISK replicas across all tenants...

CVE-2026-106040: Missing Authorization

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the cororpc master port can evict DISK replicas across all tenants,...

Rocky Linux 9.6 [TuxCare] Security Update: redis / redis-devel / redis-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778616298)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778616298 advisory. - Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778845249)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778845249 advisory. - Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can...

Astra Linux – Vulnerability in Redis

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled. This may lead to remot...

Linux Distros Unpatched Vulnerability : CVE-2026-82064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server...

CVE-2026-82064

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

EUVD-2026-72951

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

CVE-2026-82064 Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...