CVE-2026-119188

A flaw was found in node-forge. A remote attacker can trigger a Denial of Service DoS by sending an unexpected Transport Layer Security TLS record during a fragmented handshake sequence. Because the library fails to cleanly halt processing after closing the invalid connection, it throws an uncaug...

CVE-2026-119188 Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection, fragmented handshake message, interleaved record to process the relevant input or security decision. node-forge continued...

CVE-2026-119188 Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection, fragmented handshake message, interleaved record to process the relevant input or security decision. node-forge continued...

CVE-2026-119188

The Forge (also known as node-forge ) JavaScript TLS implementation is vulnerable to a Denial of Service (DoS) condition in versions prior to 1.4.1 . The root cause lies in how forge.tls.createConnection() handles fragmented handshake messages; the library continues processing after a TLS record ...

CVE-2026-119053

The lwIP stack, versions 2.0.0 through 2.2.1 built with the SNMP agent , contains an out-of-bounds read vulnerability in the snmp_pbuf_stream_writeto() function. The root cause is that the function performs bounds copies using pbuf->len instead of the actual remaining bytes. Remote unauthentic...

CVE-2024-38063-scanner

Overview This project is a Python script designed to identify and exploit vulnerable Windows systems using Shodan for reconnaissance and Scapy for crafting and sending malicious IPv6 packets targeting CVE-2024-38063. The tool automates the process of searching for vulnerable hosts, verifying thei...

CVE-2026-114213

Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a fragmented message made of many 1-byte continuation frames. Bandit.WebSocket.Connection checks...

EUVD-2026-109821

Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a fragmented message made of many 1-byte continuation frames. Bandit.WebSocket.Connection checks...

EEF-CVE-2026-114213 WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit

Summary Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a fragmented message made of many 1-byte continuation frames. Bandit.WebSocket.Connection checks...

PT-2026-123306

Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a fragmented message made of many 1-byte continuation frames. Bandit.WebSocket.Connection checks max...

CVE-2024-38063

CVE-2024-38063 PoC | DKob & N3TCR4SH Overview This script is a Proof of Concept PoC for exploiting CVE-2024-38063. It generates and sends malicious fragmented IPv6 packets with specific destination options to target a kernel, potentially causing denial-of-service or instability. Article Link: Her...

CVE-2026-110682

A flaw was found in perl-Cpanel-JSON-XS. The allownonref configuration is enabled by default, and the incrparse function inherits it. Because a top-level number, boolean true or false, or null has no closing delimiter, the incremental parser simply decodes whatever data has arrived at the time of...

SUSE CVE-2026-98733

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize fragmented ISO packet queueing The fragmented path in hciqueueiso calls skbqueuetail without holding conn-dataq.lock. The socket lock serializes senders, but the transmit worker can concurrently remo...

DEBIAN-CVE-2026-98733

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize fragmented ISO packet queueing The fragmented path in hciqueueiso calls skbqueuetail without holding conn-dataq.lock. The socket lock serializes senders, but the transmit worker can concurrently remo...

AZL-109272 CVE-2026-98733 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize fragmented ISO packet queueing The fragmented path in hciqueueiso calls skbqueuetail without holding conn-dataq.lock. The socket lock serializes senders, but the transmit worker can concurrently remo...

EUVD-2026-103818

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize fragmented ISO packet queueing The fragmented path in hciqueueiso calls skbqueuetail without holding conn-dataq.lock. The socket lock serializes senders, but the transmit worker can concurrently remo...

CVE-2026-98733

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize fragmented ISO packet queueing The fragmented path in hciqueueiso calls skbqueuetail without holding conn-dataq.lock. The socket lock serializes senders, but the transmit worker can concurrently remo...

Astra Linux – Vulnerability in Linux

A issue was discovered in the kernel of OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can exploit this to inject arbitrary network packets, regardless of the network configuration...

Astra Linux – Vulnerability in Linux

A issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations allow fragmented plaintext frames to be transmitted in a protected Wi-Fi network. An adversary can exploit this vulnerability to inject arbitrary data frames independently...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check the control transfer buffer size before accessing it. If the first fragment is shorter than struct usbcdcnotification, we cannot calculate the expectedsize. Instead, log an error and discard the notification...