Updated python-httplib2 packages fix a security vulnerability

Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling. CVE-2026-59939...

Updated bind package fixes security vulnerabilities

Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...

DEBIAN-CVE-2026-94083

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 when there is a DoH2 request with an HTTP1 to HTTP2 upgrade. This requires app-layer.protocols.doh2 to be enabled, which is th...

CVE-2026-94083

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 when there is a DoH2 request with an HTTP1 to HTTP2 upgrade. This requires app-layer.protocols.doh2 to be enabled, which is th...

CVE-2026-94083

Suricata before 8.0.7 is affected by a DoH2 type confusion vulnerability. When a DoH2 request includes an HTTP/1 to HTTP/2 upgrade, the HTTP/2 state cleanup code is executed even though the actual connection state is HTTP/1, leading to an invalid free . The issue requires app-layer.protocols.doh2...

Apache PDFBox 3.0.8 Flate PNG Predictor Disproportionate Heap Allocation DoS

Summary The Apache PDFBox library is an open source Java tool for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command-line utilities...

CVE-2026-94083: Access of Resource Using Incompatible Type

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 when there is a DoH2 request with an HTTP1 to HTTP2 upgrade. This requires app-layer.protocols.doh2 to be enabled, which is th...

Linux Distros Unpatched Vulnerability : CVE-2026-94055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. CVE-2026-94055 Note that Nessus relies on the presence of...

CVE-2022-26937

Windows Network File System Crash PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data...

CVE-2025-34226

CVE-2025-34226: DoS persistente en OpenPLC Runtime Resumen de la vulnerabilidad...

CVE-2020-8158

CVE-2020-8158: TypeORM Prototype Pollution Vulnerability Overview This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions 0.2.25. Vulnerability Details CVE ID : CVE-2020-8158 CVSS Score : 9.8 CRITICAL Affected Package : TypeORM 0.2....

TKEY-remote-DoS-vulnerability-exploit

TKEY-remote-DoS-vulnerability-exploit Código de exploit para CVE-2015-5477 POC...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server TinyWeb Assigned CVE ID: CVE-2026-67184 Summary When TinyWeb fails to parse a request line, it returns an error but leaves the request's URL pointer set to NULL. The caller ignores the error and passes the request to t...

DEBIAN-CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

AZL-103320 CVE-2026-82560 affecting package perl 5.38.2-516

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

UBUNTU-CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2024-27088

CVE-2024-27088 취약점 개요 CVE-2024-27088 Feb 26, 2024 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories root@kitploit: /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and...

CVE-2025-66676

CVE-2025-66676 In IOBit Unlocker 1.3.0.11 and earlier, the application allows arbitrary process termination by trying to unlock a file. Background The application is used to unlock a unlocked file. By specifying the process image file of a running process as the locked file, IOBit unlocker will t...