CVE-1999-0193

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...

CVE-1999-0396

A race condition between the select and accept calls in NetBSD TCP servers allows remote attackers to cause a denial of service...

CVE-1999-0837

Denial of service in BIND by improperly closing TCP sessions via solinger...

CVE-1999-0226

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...

CVE-1999-0796

FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks...

CVE-1999-0053

TCP RST denial of service in FreeBSD...

CVE-1999-0305

The system configuration control sysctl facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the 1 dosourceroute or 2 forwarding variables are set, which allows remote attackers to spoof TCP...

CVE-2019-12258

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options...

CVE-2019-12263

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition...

CVE-2019-12388

Anviz access control devices perform cleartext transmission of sensitive information passwords/pins and names when replying to query on port tcp/5010...

CVE-2022-27491

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q-elevator in blkmqelvswitchnone CVE-2023-53292 In the Linux kernel, the following vulnerability has been resolved: block: fix race between setblocksize and read paths CVE-2025-3807...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000405 advisory. An issue was discovered in net/ipv4/sysctlnetipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000297 advisory. Jonathan Looney discovered that the TCPSKBCBskb-tcpgsosegs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000393 advisory. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more th...

Linux Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell Module Options msf use payload/linux/riscv64le/shellbindtcp msf payloadshellbindtcp show actions ...actions... msf payloadshellbindtcp set ACTION msf payloadshellbindtcp show options ...show and set options... msf payloadshellbindtcp run This modu...

PT-2026-26050

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel addresses an issue where off-path TCP source port leakage could occur via a SYN cookie side-channel. The resolution involves reintroducing TCP ports into the timestamp...

PT-2026-27686

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-08368-gfafda3b4b06b 22 Description The Linux kernel contains a flaw related to MPTCP Multipath TCP path management. A specific sequence of actions, involving setting the MPTCP subflows limit to zero,...

PT-2026-7992

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the NVMe-TCP component where the nvmet tcp build pdu iovec function could walk past cmd-req.sg when a Protocol Data Unit PDU length or offset exceeds sg cnt...

PT-2026-8164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mptcp pm nl flush addrs doit function within the Linux kernel’s MPTCP implementation. This issue stems from the use of list splice init which is not RCU...