CVE-2026-102047

Juniper Networks Junos OS and Junos OS Evolved are affected by an Improper Validation of Consistency within Input vulnerability in the l2cpd process. An adjacent unauthenticated Layer 2 attacker can cause a denial of service in associated Layer 2 control protocols by sending a crafted MVRP Ethern...

CVE-2026-102047 Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...

CVE-2026-102045

A vulnerability in the lacpd component of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service . The root cause is an Out-of-bounds Write triggered by receiving a crafted frame on an LACP-enabled aggregated-Ethernet member port . No specific exploit li...

CVE-2026-92151 F´: SpacePacketDeframer Small Packet Assertion DoS

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::Ccsds::SpacePacketDeframer dataInhandler is vulnerable because the handler treats the minimum packet-length condition as FWASSERT rather than rejecting a...

CVE-2026-98423

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: don't hand frames to mac80211 while stopping The code checks -started for frames coming from wmediumd, but the radio can be stopped after the check and before frame delivery, causing mac80211 to hit the...

cve-2023-44487

CVE-2023-44487 HTTP/2 Rapid Reset There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack starting many streams and immediately sending RSTSTREAM frame to avoid reaching MAXCONCURRENTSTREAMS. H2SpaceX I us...

Unity Linux 20.1070a Security Update: rsyslog (UTSA-2026-130143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130143 advisory. A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cau...

CVE-2026-85803

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-83753

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-83771

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-416 and has a High base severity score of 8.8. No specific exploit details or direc...

CVE-2026-85803

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root cause details, or exploit links are provided in the documents; however, an official fix is noted as ...

CVE-2026-83753

A heap-based buffer overflow exists in the Windows Camera Frame Server Monitor . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or direct links to exploit code are provided in the documents, though an official fix is ind...

http2-rst-stream-attacker

CVE-2023-44487 and http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 is an exploit against the HTTP2 protocol itself. In HTTP2, requests for data are initiated by sending a HEADERS frame. After receiving this frame, a server will start processing your request, subsequently sending DATA fram...

Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...

DEBIAN-CVE-2026-109736

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-84388-POC

FortiPAM Chrome Extension UI Layer RCE PoC - CVE-2026-84388 Overview This repo contains a proof-of-concept exploit for CVE-2026-84388 Improper Restriction of Rendered UI Layers or Frames, CWE-1021. The vulnerability in Fortinet FortiPAM Chrome Extension v7.4–8.0 allows any visited website to bypa...

CVE-2026-109736

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109736

Mozilla Firefox is affected by CVE-2026-109736 , which involves frame poisoning in the Layout component . This vulnerability has a moderate impact . The issue was addressed and fixed in Firefox 158 and Firefox ESR 153.5 . No specific exploit details or direct links to in-the-wild exploitation wer...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack starting many streams and immediately sending RSTSTREAM frame to avoid reaching MAXCONCURRENTSTREAMS. I use H2Space...