Resource Exhaustion

Apache Qpid Proton-J is vulnerable to resource exhaustion. The vulnerability is due to the inability to govern the maximum number of transfer frames per incoming delivery, where the library does not enforce a limit on the number of frames and an authenticated attacker can send deliveries with...

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment 이 취약점은 Atomberg Erica Smart Fan펌웨어 버전 1.0.36의 장치 가용성과 안정적인 작동에 영향을 미칩니다. 문제는 위조된 연결 해제 프레임에 대한 보호 메커니즘 부재와 장치의 폴백 또는 재연결 검증 부족으로 인해 발생합니다. 이 취약점에 대한 개념 증명PoC은 첨부된 PDF에 문서화되어 있으며, 해당 조직의 내부 보안 검토를 위해 원래 제공된 것입니다. 발견자 - CipherX1802...

PT-2026-103516

Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1 Description The gateway WebSocket transport contains an allocation of resources without limits. This allows connected gateways to exhaust node memory by sending an unending sequence of WebSocket...

CVE-2026-42772

A flaw was found in OpenSSL. A remote attacker who establishes a QUIC network connection can cause a Denial of Service DoS by sending specially sequenced, out-of-order stream frames. Because the stream reassembly mechanism handles non-sequential data fragments inefficiently, processing these fram...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 스트림 증폭 PoC · Docker · 웹 콘솔 취약점 HTTP/2는 단일 TCP 연결을 통해 여러 스트림을 멀티플렉싱할 수 있습니다. 이 PoC는 다수의 내부 참조를 포함하는 특수하게 구성된 HEADERS 프레임을 생성하여, 서버가 이를 추적하기 위해 막대한 양의 메모리를 할당하도록 강제합니다. 서버| 증폭률| 영향 ---|---|--- Envoy 1.37.2| 5,700:1| 약 10초 내 32 GB Apache httpd 2.4.67| 4,000:1| 약 1...

CVE-2026-98158

A flaw was found in the Linux kernel's Point-to-Point Protocol asynchronous pppasync driver. When handling corrupted network frames, the driver improperly reuses packet buffers without preserving the required memory headroom. A connected peer can exploit this flaw by sending a sequence of crafted...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset 점검기 PoC 설명 이 도구는 CVE-2023-44487 , 일명 HTTP/2 Rapid Reset Attack 에 대한 개념 증명PoC입니다. 이 취약점은 공격자가 HTTP/2 연결을 통해 RSTSTREAM 프레임을 빠르게 전송하여 대상 서버를 압도함으로써 서비스 거부DoS 공격을 수행할 수 있게 합니다. 기능 단일 URL 테스트 : 단일 URL의 취약점을 테스트합니다. 대량 URL 테스트 : 파일에 제공된 여러 URL을 테스트합니다. HTTP 및 HTTPS 지...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: WLAN 호스트 및 펌웨어의 일시적 DOS 개요 이 리포지토리는 Qualcomm 장치에서 확인된 취약점인 CVE-2023-33105의 익스플로잇 코드를 포함합니다. 이 익스플로잇은 인증 프레임을 활용하여 잘못된 트랜잭션 시퀀스 번호를 가진 대량의 개방형 인증 프레임을 전송함으로써 대상 액세스 포인트AP에 대한 서비스 거부DoS 공격을 수행합니다. CVE ID : CVE-2023-33105 Qualcomm 보안 게시판 : 2024년 3월 게시판 요구 사항 Python 3.x Scapy Termcolo...

CVE-2026-93805

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. The kernel fails to properly validate the length of wireless management frames before accessing subtype-specific data fields. An attacker within wireless range could exploit this flaw by transmitting malformed, truncated manageme...

CVE-2026-93271

A flaw was found in the ath11k wireless driver in the Linux kernel. This vulnerability allows an adjacent attacker within Wi-Fi range to cause a Denial of Service DoS by transmitting wireless frames with an out-of-range Modulation and Coding Scheme MCS index. Because the driver fails to properly...

CVE-2026-93790

A flaw was found in the Linux kernel's iwlwifi wireless driver. An out-of-bounds memory access vulnerability exists in the Block Acknowledgement BA notification handling logic due to improper array indexing and missing bounds validation on traffic identifiers. A nearby attacker within wireless...

rapidresetclient

Rapid Reset Client Rapid Reset Client는 CVE-2023-44487Rapid Reset DDoS 공격 벡터에 대한 완화 조치와 노출 여부를 테스트하는 도구입니다. 이 도구는 단일 TCP 소켓을 열고 TLS를 협상하며 인증서를 무시하고 SETTINGS 프레임을 교환하는 최소한의 HTTP/2 클라이언트를 구현합니다. 그런 다음 클라이언트는 HEADERS 프레임과 RSTSTREAM 프레임을 빠르게 전송합니다. 초기 설정 후에는 서버 프레임을 stdout으로 출력하는 것 외에는 처리하지 않고 모니터링만...

CLEANSTART-2026-NW24142 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

CVE-2026-33814 affects multiple packages. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0. See references for individual vulnerability details...

DEBIAN-CVE-2026-98061

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return from that frame. The verifier makes R0 unknown and calls preparefuncexit for the taken branch. When the current frame i...

DEBIAN-CVE-2026-97981

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...

DEBIAN-CVE-2026-97595

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154subifframe queues received beacon and MAC-command frames onto local-rxbeaconlist / rxmaccmdlist and schedules a process-context worker,...

AZL-104334 CVE-2026-97595 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154subifframe queues received beacon and MAC-command frames onto local-rxbeaconlist / rxmaccmdlist and schedules a process-context worker,...

UBUNTU-CVE-2026-97595

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154subifframe queues received beacon and MAC-command frames onto local-rxbeaconlist / rxmaccmdlist and schedules a process-context worker,...

UBUNTU-CVE-2026-97981

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...