CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

CVE-2002-0448

CVE-2002-0448 Xerver 2.10 - Múltiples vulnerabilidades de denegación de servicio por solicitud Publicación de Exploit-db en https://www.exploit-db.com/exploits/21336/ Autor Alex Hernandez aka @alt3kx...

CVE-2021-3166

Se descubrió un problema en Asus DSL-N14UB1 v.1.1.2.3805. Un atacante puede subir cualquier archivo al campo de Firmware siempre que se renombre como SettingsProductName.trx p. ej., SettingsDSL-N14U-B1.trx. Una vez que se carga el archivo, se activan medidas de apagado en una amplia gama de...

pentmenu

pentmenu 一个能让你进行快速简便网络扫描与DOS攻击的命令菜单 必要时需要sudo 已在Debian与Arch下测试通过 依赖： bash sudo curl netcat（必须支持'-k'选项，推荐openbsd版本） hping3（或者用nping来代替进行洪水攻击） openssl stunnel nmap whois（推荐但不要求） nslookup（或'host'） ike-scan 如何使用？ 下载脚本： root@kitploit: $ wget...

CVE-2026-36228

CVE-2026-36228: Easy Chat Server 3.1 Chat Message mtowho Denial of Service PoC This repository contains a benign-by-default proof of concept for CVE-2026-36228, a denial-of-service issue in Easy Chat Server 3.1 chat message handling. This repository is for authorized security research and local...

CVE-2026-56975

CVE-2026-56975 affects the Cellular Modem component in Google Pixel devices (referenced in the Pixel September 2026 security bulletin ). The root cause is improper input validation , which can lead to a remote proximal/adjacent denial of service with low privileges required and no user interactio...

CVE-2026-56975

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78980

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55306

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55306

CVE-2026-55306 is an improper input validation flaw in the Cellular Modem of Google Pixel devices, leading to a remote denial of service with no required privileges or user interaction. The Pixel September 2026 bulletin classifies it as Critical severity (CVSS 3.1 base score 7.5, HIGH). CISA's SS...

CVE-2026-55306

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78944

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...

Low: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...

Moderate: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

EUVD-2026-79141

On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legitimate users being unable to log in to the...

CVE-2026-19641 On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legit

On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legitimate users being unable to log in to the...

CVE-2026-58483

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread in src/index.ts passes a caller-supplied URL to readUrlContent in src/url-reader.ts, where checkContentLength treats a missing Content-Length...