Security Bulletin: Multiple Vulnerabilities in Hyper-Converged Database 1.2

Summary Multiple vulnerabilities were addressed in Hyper-Converged Database version 1.2.7 Vulnerability Details CVEID:CVE-2026-42583 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of...

trellis-cve-2018-6389

trellis-cve-2018-6389 Mitiga gli attacchi WordPress a load-scripts / load-styles di CVE-2018-6389. Obiettivo Perché? Mitigazione Perché no? Requisiti Installazione Trellis WordPress FAQ Posso usarlo su hosting gestito? Sembra fantastico. Dove posso trovare altre chicche simili? Non è su wp.org...

CVE-2025-70886

CVE-2025-70886 Un exploit Proof of Concept PoC per CVE-2025-70886, una vulnerabilità di denial of service persistente in Halo CMS v2.22.4 e versioni precedenti che consente ad attaccanti remoti di mandare in crash l'interfaccia dei commenti dell'admin inviando payload malformati. Informazioni di...

cve-2025-24813-poc

CVE-2025-24813 Exploit PoC per RCE su Apache Tomcat Questo repository contiene un exploit proof-of-concept per CVE-2025-24813, una vulnerabilità di deserializzazione Java in Apache Tomcat. Basato su absholi7ly/POC-CVE-2025-24813/. Prerequisiti Docker Configurazione 1. Installa le dipendenze: uv...

CVE-2025-60709

🚨 EXPLOIT PoC — SOLO PER RICERCA DI SICUREZZA, ANALISI DELLE VULNERABILITÀ E SCOPI DIFENSIVI 🚨 PoC DI EXPLOIT — SOLO PER RICERCA DI SICUREZZA, ANALISI DELLE VULNERABILITÀ E FINI DIFENSIVI 🌐 Lingue / Languages 🇮🇹 Italiano 🇬🇧 Inglese 🇮🇹 Documentazione in Italiano Descrizione CVE-2025-60709 è una...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Ehi, in questo lab di LetsDefend mi sono immerso in una zero-day di SharePoint chiamata ToolShell CVE-2025-53770. In pratica, ho replicato un attacco reale in cui una richiesta POST maliziosa bypassava l'autenticazione, eseguiva...

CVE-2017-0199-Fix

Fix per CVE-2017-0199 Rimuovi la capacità di CVE-2017-0199 di eseguire codice modificando il gestore predefinito per i file .hta. Il gestore predefinito per i file richiamati tramite OLE2 oggetti COM è archiviato separatamente dall'applicazione predefinita del sistema locale e può essere modifica...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE Proof-of-concept e note tecniche per CVE-2026-34197 , una vulnerabilità di esecuzione remota di codice in Apache ActiveMQ Classic raggiungibile tramite il bridge JMX-HTTP di Jolokia. Versioni affette: ActiveMQ Classic ⚠️ Solo per tes...

AZL-107117 CVE-2026-97032 affecting package podman 5.6.1-10

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107144 CVE-2026-97032 affecting package application-gateway-kubernetes-ingress 1.7.7-6

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107222 CVE-2026-97032 affecting package cloud-provider-kubevirt 0.5.1-9

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107532 CVE-2026-97032 affecting package jx 3.10.182-5

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107775 CVE-2026-97032 affecting package opa 0.63.0-5

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107832 CVE-2026-97032 affecting package prometheus-node-exporter 1.7.0-5

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107811 CVE-2026-97032 affecting package prometheus-adapter 0.12.0-10

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

DEBIAN-CVE-2026-97032

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107715 CVE-2026-97032 affecting package moby-containerd-cc 1.7.7-17

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107943 CVE-2026-97032 affecting package vitess 19.0.4-14

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107279 CVE-2026-97032 affecting package coredns 1.11.4-21

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107237 CVE-2026-97032 affecting package containerd2 2.3.4-1

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...