Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc (crlsa-2026_25090)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202625090 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: zlib / zlib-debuginfo / zlib-debugsource / zlib-devel / zlib-static (crlsa-2022_1642)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221642 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc (crlsa-2024_11232)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411232 advisory. unbound: Unbounded name compression could lead to Denial of Service CVE-2024-8508 Tenable has extracted the preceding description block directly from the CIQ...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (CENTOS-STREAM8:CLSA-2026:1790264021)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1790264021 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...

Rocky Linux 10.0 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2025_7593)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257593 advisory. Ghostscript: NPDL device: Compression buffer overflow CVE-2025-27832 Tenable has extracted the preceding description block directly from the CIQ security advisor...

Rocky Linux 8 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc (crlsa-2023_1140)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231140 advisory. curl: HTTP multi-header compression denial of service CVE-2023-23916 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource (crlsa-2022_2201)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20222201 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2026_25057)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202625057 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block direct...

CVE-2026-102997

A flaw was found in pypdf. A remote attacker can exploit this vulnerability by providing a crafted PDF document containing a partially malformed FlateDecode data compression stream. When processing the malformed stream, the application triggers an inefficient recovery routine that consumes...

Improper Resource Management.

compression is vulnerable to Improper Resource Management. The vulnerability is due to the zlib compression stream not being destroyed after a client disconnects, which allows a remote unauthenticated attacker to repeatedly initiate requests and terminate connections early, exhausting server memo...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Сканер уязвимости SMBGhost в Microsoft Windows - CVE-2020-0796 - SMBv3-RCE Сканер предназначен только для проверки, уязвим ли сервер. Он не предназначен для исследований или разработки, отсюда и фиксированная полезная нагрузка. Он проверяет диалект SMB 3.1.1 и поддержку сжатия с помощью запроса...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (CENTOS-STREAM8:CLSA-2026:1769424072)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1769424072 advisory. - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it nee...

Clematis

Clematis 中文 | English 🛠️ Мощный инструмент для преобразования PE-файлов EXE/DLL в позиционно-независимый шеллкод. ✨ Ключевые возможности Поддержка преобразования PE-файлов EXE/DLL в шеллкод Совместимость с архитектурами x86 и x64 Поддержка аргументов командной строки Встроенный алгоритм сжатия...

http2-bomb-detector

http2-bomb-detector Détecteur non destructif de vulnérabilité HTTP/2 Bomb CVE-2026-49975 — pour Nginx / Apache httpd Contexte de la vulnérabilité CVE-2026-49975 est une vulnérabilité de déni de service à distance affectant largement la couche de protocole HTTP/2, découverte par le chercheur en...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 원격 서비스 거부 취약점 재현 도구 취약점 개요 CVE-2026-49975 는 주요 웹 서버에 영향을 미치는 HTTP/2 서비스 거부 취약점입니다. 이 취약점은 보안 회사 CalifOpenAI Codex 사용에 의해 2026년 6월 초에 발견되었습니다. 공격 원리 1. HPACK 압축 폭탄 : 매우 작은 헤더예: "x: a"를 서버 HPACK 동적 테이블에 삽입한 후, 수천 개의 1바이트 인덱스 참조를 전송합니다. 각 참조는 서버가 많은 양의 부기 메모리를...

CVE-2026-49975

CVE-2026-49975 Outil de reproduction de la bombe HTTP/2 Auteur : polar bear Version : 2.1 Vulnérabilité concernée : CVE-2026-49975 bombe mémoire du protocole HTTP/2 📖 Principe de la vulnérabilité CVE-2026-49975 est une vulnérabilité d'épuisement de la mémoire dans l'implémentation du protocole...

CVE-2020-0796-BOF

C'est le bricolage de Raphael autour du SMBGhost LPE. J'ai commencé avec le code source du Metasploit Framework: cve-2020-0796: Débordement de tampon de compression SMBv3 SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 Sous...

CVE-2025-14847

MongoDB CVE-2025-14847 취약점 탐지 도구 MongoDB 메모리 누수 취약점 CVE-2025-14847 탐지 도구 ⚠️ 중요 알림: 이 도구는 승인된 보안 테스트 및 취약점 평가에만 사용하십시오. 승인되지 않은 사용은 법률 위반이 될 수 있습니다. 📋 목차 취약점 설명 기능 특징 설치 사용 방법 테스트 환경 구축 출력 예시 탐지 원리 수정 권장 사항 면책 조항 🔍 취약점 설명 CVE-2025-14847 은 MongoDB Zlib 압축 프로토콜 처리 과정에서 발생하는 심각한 메모리 누수 취약점입니다. 공격자는...

CVE-2024-3094-checker

Script de détection et de remédiation CVE-2024-3094 Ce script est conçu pour détecter et corriger une vulnérabilité critique, CVE-2024-3094, qui affecte la bibliothèque de compression de données XZ Utils. La vulnérabilité a été mise en avant dans une alerte de la CISA et a des implications...

external_zlib-1.2.7_CVE-2018-25032

ZLIB DATA COMPRESSION LIBRARY BIBLIOTHÈQUE DE COMPRESSION DE DONNÉES ZLIB zlib 1.2.7 est une bibliothèque de compression de données à usage général. Tout le code est thread-safe. Le format de données utilisé par la bibliothèque zlib est décrit par les RFC Request for Comments 1950 à 1952 dans les...