341 matches found
CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
Google Go security vulnerabilities
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from an error message not escaping attacker-controlled data when ALPN negotiation fails, which could lead to informatio...
SUSE CVE-2025-62409
Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the flow control management process while overriding onAboveWriteBufferHighWatermark and onBelowWriteBufferLowWatermark callbacks. An attacker can cause a crash of the TCP connection pool by sending large...
EUVD-2015-6213
Malware in sbrugna...
EUVD-2018-0875
Malware in sbrugna...
EUVD-2021-26922
Malware in sbrugna...
EUVD-2014-3763
Malware in sbrugna...
EUVD-2014-2151
Malware in sbrugna...
EUVD-2016-2375
Malware in sbrugna...
EUVD-2019-4246
Malware in sbrugna...
EUVD-2018-1063
Malware in sbrugna...
EUVD-2021-14253
Malware in sbrugna...
EUVD-2013-4540
Malware in sbrugna...
EUVD-2013-4541
Malware in sbrugna...
EUVD-2019-16178
Malware in sbrugna...
EUVD-2025-13941
Malicious code in bioql PyPI...
EUVD-2022-27383
Malicious code in bioql PyPI...