Resource Exhaustion

Apache Qpid Proton-J is vulnerable to resource exhaustion. The vulnerability is due to the inability to govern the maximum number of transfer frames per incoming delivery, where the library does not enforce a limit on the number of frames and an authenticated attacker can send deliveries with...

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment Esta vulnerabilidad afecta la disponibilidad del dispositivo y el funcionamiento confiable del Ventilador Inteligente Atomberg Erica Versión de Firmware 1.0.36. El problema surge debido a la falta de mecanismos de protección contra tramas de...

PT-2026-103516

Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1 Description The gateway WebSocket transport contains an allocation of resources without limits. This allows connected gateways to exhaust node memory by sending an unending sequence of WebSocket...

CVE-2026-42772

A flaw was found in OpenSSL. A remote attacker who establishes a QUIC network connection can cause a Denial of Service DoS by sending specially sequenced, out-of-order stream frames. Because the stream reassembly mechanism handles non-sequential data fragments inefficiently, processing these fram...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

http2-bomb

Bomba HTTP/2 — CVE-2026-49975 PoC de Amplificación de Streams HTTP/2 · Docker · Consola Web Vulnerabilidad HTTP/2 permite multiplexar múltiples streams sobre una única conexión TCP. Este PoC construye tramas HEADERS especialmente formadas que contienen un gran número de referencias internas,...

CVE-2026-98158

A flaw was found in the Linux kernel's Point-to-Point Protocol asynchronous pppasync driver. When handling corrupted network frames, the driver improperly reuses packet buffers without preserving the required memory headroom. A connected peer can exploit this flaw by sending a sequence of crafted...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset Checker PoC Descriptions This main is a Proof of Concept PoC for CVE-2023-44487 , also known as the HTTP/2 Rapid Reset Attack. The vulnerability allows attackers to perform a Denial of Service DoS attack by rapidly sending RSTSTREAM frames over HTTP/2...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: Transient DOS in WLAN Host and Firmware Overview This repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication frames to perform a denial of service DoS attack on a target access point AP by sendi...

CVE-2026-93805

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. The kernel fails to properly validate the length of wireless management frames before accessing subtype-specific data fields. An attacker within wireless range could exploit this flaw by transmitting malformed, truncated manageme...

CVE-2026-93271

A flaw was found in the ath11k wireless driver in the Linux kernel. This vulnerability allows an adjacent attacker within Wi-Fi range to cause a Denial of Service DoS by transmitting wireless frames with an out-of-range Modulation and Coding Scheme MCS index. Because the driver fails to properly...

CVE-2026-93790

A flaw was found in the Linux kernel's iwlwifi wireless driver. An out-of-bounds memory access vulnerability exists in the Block Acknowledgement BA notification handling logic due to improper array indexing and missing bounds validation on traffic identifiers. A nearby attacker within wireless...

rapidresetclient

Client de réinitialisation rapide Rapid Reset Client est un outil pour tester les mesures de protection et l'exposition à CVE-2023-44487 vecteur d'attaque DDoS Rapid Reset. Il implémente un client HTTP/2 minimaliste qui ouvre un seul socket TCP, négocie TLS, ignore le certificat, et échange des...

CLEANSTART-2026-NW24142 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

CVE-2026-33814 affects multiple packages. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0. See references for individual vulnerability details...

DEBIAN-CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

DEBIAN-CVE-2026-97981

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...

DEBIAN-CVE-2026-97595

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154subifframe queues received beacon and MAC-command frames onto local-rxbeaconlist / rxmaccmdlist and schedules a process-context worker,...

AZL-104334 CVE-2026-97595 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154subifframe queues received beacon and MAC-command frames onto local-rxbeaconlist / rxmaccmdlist and schedules a process-context worker,...

UBUNTU-CVE-2026-97595

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154subifframe queues received beacon and MAC-command frames onto local-rxbeaconlist / rxmaccmdlist and schedules a process-context worker,...

UBUNTU-CVE-2026-97981

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...