Lucene search
+L

402 matches found

Packet Storm News
Packet Storm News
added 2026/03/01 12:00 a.m.8 views

Power Network SCADA Quantum Communications: A Comparison of BB84, B92, E91, and SGS04 Quantum Key Distribution Protocols

The current state, emerging trends, and practical challenges of optical fiber-based power network SCADA quantum communication must be addressed to fully utilise the technological platform's potential in real-world power system SCADA communications involving massive volumes of real-time data, as...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/02/26 4:27 p.m.14 views

GO-2026-4534 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation in github.com/gofiber/fiber/v3

Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation in github.com/gofiber/fiber/v3...

7.5CVSS5.4AI score0.00396EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/26 4:27 p.m.13 views

GO-2026-4540 Fiber has an Arbitrary File Read in Static Middleware on Windows in github.com/gofiber/fiber/v3

Fiber has an Arbitrary File Read in Static Middleware on Windows in github.com/gofiber/fiber/v3...

8.7CVSS5.5AI score0.00619EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/02/25 10:17 p.m.8 views

CVE-2026-25899

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS5.3AI score0.00396EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/02/25 10:17 p.m.10 views

CVE-2026-25891

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS5.7AI score0.00619EPSS
SaveExploits1References1
Snyk
Snyk
added 2026/02/25 12:12 a.m.5 views

Improper Validation of Array Index

Overview github.com/gofiber/fiber/v3 is an Express inspired web framework written in Go. Affected versions of this package are vulnerable to Improper Validation of Array Index via the route registration process. An attacker can cause the application to crash by sending requests to routes containi...

8.7CVSS5.9AI score0.00587EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/02/25 12:12 a.m.3 views

Improper Validation of Array Index

Overview github.com/gofiber/fiber is an Express inspired web framework written in Go. Affected versions of this package are vulnerable to Improper Validation of Array Index via the route registration process. An attacker can cause the application to crash by sending requests to routes containing...

8.7CVSS5.9AI score0.00587EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/24 10:16 p.m.13 views

CVE-2026-25899

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS0.00396EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/24 10:16 p.m.14 views

CVE-2026-25891

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS0.00619EPSS
SaveExploits1References3
NVD
NVD
added 2026/02/24 9:16 p.m.13 views

CVE-2026-25882

Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sending requests to routes with more than 30 parameters. The vulnerability results from missing validation during route...

7.5CVSS0.00587EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/24 9:11 p.m.26 views

CVE-2026-25899 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS0.00396EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/24 9:11 p.m.9 views

CVE-2026-25899 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS5.5AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/24 9:11 p.m.8 views

CVE-2026-25899 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS5.3AI score0.00396EPSS
SaveExploits1References2
CVE
CVE
added 2026/02/24 9:11 p.m.35 views

CVE-2026-25899

CVE-2026-25899 affects GoFiber (Fiber) v3 branch prior to 3.1.0. The issue arises from the use of the fiber_flash cookie, which can trigger unbounded memory allocation (up to ~85 GB) via unvalidated MsgPack deserialization. A crafted 10-character cookie causes the allocation, with no authenticati...

7.5CVSS5.3AI score0.00396EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/24 9:11 p.m.5 views

CVE-2026-25899

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the fiberflash cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack...

7.5CVSS5.8AI score0.00396EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2026/02/24 9:08 p.m.37 views

CVE-2026-25891

This CVE affects the Go web framework Fiber (v3 up to 3.0.0) and allows a remote attacker to perform a path traversal to bypass the static middleware sanitizer and read arbitrary files on Windows. Root cause: improper validation in static middleware enabling directory traversal (CWE-22). Impact: ...

8.7CVSS5.7AI score0.00619EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/24 9:08 p.m.7 views

CVE-2026-25891 Fiber has an Arbitrary File Read in Static Middleware on Windows

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS5.7AI score0.00619EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/24 9:08 p.m.11 views

CVE-2026-25891 Fiber has an Arbitrary File Read in Static Middleware on Windows

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS5.8AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/24 9:08 p.m.7 views

CVE-2026-25891

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS5.9AI score0.00619EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/24 9:08 p.m.40 views

CVE-2026-25891 Fiber has an Arbitrary File Read in Static Middleware on Windows

Fiber is an Express inspired web framework written in Go. A Path Traversal CWE-22 vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been...

8.7CVSS0.00619EPSS
SaveExploits1References3
Rows per page
Query Builder