waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

CLEANSTART-2024-ZP37934 System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a specul...

Security vulnerability affects the xen package. System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...

CVE-2026-108086

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

CVE-2026-108086

The Apache Cocoon framework (all versions) is vulnerable to an XML Entity Expansion (XEE) issue due to improper restriction of recursive entity references in DTDs. This vulnerability specifically affects the fp: form processor , where it can lead to Server-Side Request Forgery (SSRF) , potentiall...

CVE-2026-108086

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

CVE-2026-108086 Apache Cocoon: XEE could lead to SSRF and information disclosure

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

EUVD-2026-104911

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

CVE-2026-108086 Apache Cocoon: XEE could lead to SSRF and information disclosure

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

Apache Cocoon resource management error vulnerability

All versions of Apache Cocoon are affected by a resource management error vulnerability. This vulnerability stems from improper restrictions on recursive entity references within DTDs XML entity extensions. XEE in fp: form processor may lead to Server-Side Request Forgery SSRF, potentially exposi...

PT-2026-118324

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

Wireshark 1.12.x < 1.12.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.9 advisory. - The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark...

AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785337661)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785337661 advisory. - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted...

Wireshark UMTS FP Protocol DoS

The vulnerability of the UMTS FP protocol analyzer in Wireshark, which is used to analyze computer network traffic, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104763 advisory. UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from t...

UMTS FP Protocol Analyzer DoS

The vulnerability of the UMTS FP protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to cause service interruptions...

CISCO-SA-20160330-FP

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:21+00:00| seen| https://t.me/informationsec/850 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/850 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/850...

CVE-2026-76889

A flaw was found in Wireshark. A local attacker could exploit a crash in the UMTS FP protocol dissector. This vulnerability, which requires user interaction, leads to a denial of service, making the application unavailable. Mitigation Do not open untrusted packet capture files or capture traffic...

SUSE CVE-2026-76889

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-63145

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-76889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76889 Note that Nessus relies on the presence of the...