http-stalling-detector

HTTP 스톨링 탐지기 HTTP 스톨링 DoS 공격은 웹 서버가 원격 클라이언트가 단순히 느린 링크로 연결된 것인지, 아니면 원격 클라이언트가 웹 서버가 타임아웃을 수행하고 로컬 시스템 리소스를 보존하기 위해 연결을 종료하는 것을 피하려고 의도적으로 데이터를 매우 느리게 보내는 것인지 판단할 수 없는 점을 악용합니다. 공격자에게서 일반적으로 나타나는 행동은 많은 연결을 열고 웹 서버가 연결을 타임아웃시키지 못하도록 데이터를 천천히 흘려보내는 것입니다. 웹 서버가 비교적 작은 작업자 풀을 사용하는 경우, 이러한 리소스 고갈 상태...

ROS-20261001-73-0041

The vulnerability in rclone relates to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2026-97523

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

DEBIAN-CVE-2026-97523

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

AZL-104618 CVE-2026-97523 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

EUVD-2026-86831

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

CVE-2026-97523

The Linux kernel is affected by a race condition within the mptcp component. Specifically, the mptcp scheduler may race with a subflow sockets state change , causing data transmission on a selected socket to fail. This failure can lead to a subsequent release attempting to use mss_now reset to 0 ...

ROS-20260921-73-0036

The vulnerability in curl is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel, related to the disclosure of information during data transmission, allows a perpetrator to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to the exposure of information during data transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software lies in their susceptibility to information disclosure during data transmission. This vulnerability allows attackers to expose confidential information that should be protected.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

CVE-2026-58301: Server-Side Request Forgery (SSRF)

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of a reply packet before data transmission. rxrpcreceivingreply was fixed to handle the reception of a reply packet before rxrpc has a chance to send any request DATA packets during a client call. Thi...

CVE-2026-74429 rxrpc: Fix the reception of a reply packet before data transmission

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call ...

ROS-20260813-73-0053

The vulnerability in Golang is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

EUVD-2026-52261

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information...

CVE-2026-67318 axios 1.13.0 before 1.18.0 maxBodyLength Bypass via HTTP/2

axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request API does not honor the maxBodyLength option and axios's byte-counting stream wrapper is gated on...

The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.

The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

CVE-2026-64742

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64742

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64175

A flaw was found in the Linux kernel's iwlwifi driver. When the Wi-Fi firmware crashes, the driver continues to process network transmission requests inefficiently. This creates a continuous loop of attempting to send data through an unresponsive firmware, consuming excessive CPU resources and...