990 matches found
CVE-2026-119699
WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to persist unlimited query documents via the Automatic Persisted Query handler. Attackers can send distinct queries with matching SHA-256 queryId values, including...
AV-Chaos-Monkey
AV Chaos Monkey Distributed chaos engineering platform for load testing video conferencing systems. Simulates 1500+ WebRTC participants with H.264/Opus streams and injects network chaos spikes to validate system resilience under degraded conditions Architecture 1. Media Processing Pipeline : FFmp...
CVE-2026-119699: WPGraphQL WPGraphQL Smart Cache: WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows…
WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to persist unlimited query documents via the Automatic Persisted Query handler. Attackers can send distinct queries with matching SHA-256 queryId values, including...
CVE-2026-90870
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation...
CVE-2026-90870
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows are vulnerable to server resource exhaustion. The root cause is a missing release of backend receiver sessions within the Ad Hoc Transfer component. Successful exploitation could lead to service degradation . No sp...
EUVD-2026-113027
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation...
CVE-2026-90870 Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142747)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142747 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and...
CVE-2026-96405
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...
Linux Distros Unpatched Vulnerability : CVE-2026-109278
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a...
OESA-2026-4282 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2026-4283 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2026-4281 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2026-4280 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
SUSE-SU-2026:4656-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the FormPipeRead...
CVE-2026-110114
The FJ-OMS oms-erp through PRE application is vulnerable to a missing authentication flaw within the skyer-goods component. Unauthenticated attackers can access public es-test maintenance endpoints, specifically by requesting /v1/goods/sku/es-test . This allows for the deletion and rebuilding of ...
CVE-2026-41510 OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgumentsLimit in internal/corazawaf/transaction.go, while internal/bodyprocessors/urlencoded.go writes ARGSPOST without enforcing the cap. The fl...
CVE-2026-41510
The OWASP Coraza WAF library (versions 3.0.0 through 3.8.0 ) contains a flaw where request arguments are silently dropped once the SecArgumentsLimit (default 1000) is reached. Because the engine fails to set an error flag or notify rules, an unauthenticated attacker can bypass security rules targ...