CVE-2016-8776

CVE-2016-8776 bypass frp senza sovrascrittura dell'account...

UNISOCUnlocker

UNISOCUnlocker Basiert auf CVE-2022-38694, fügt dies eine einfache UI hinzu, um die persist-Partition zu entfernen, die üblicherweise für FRP verwendet wird. WICHTIG! Keine Panik, wenn das Gerät einen schwarzen Bildschirm anzeigt. Nachdem das Skript beendet ist, drücke die Einschalttaste am Gerät...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: spegel, eks-distro, caddy, kubernetes-dns-node-cache, traefik-fips, cloudflared, eks-distro-fips, buf, kubernetes-dns-node-cache-fips, q, k3s, traefik, frp, caddy-fips...

GO-2024-2459 vulnerabilities

Vulnerabilities for packages: frp, caddy...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: terraform, flux-source-controller, nuclei, sftpgo-plugin-auth, beats, cert-manager-istio-csr-fips, ldap2pg, harbor-fips, seaweedfs-rocksdb-fips, flux, external-secrets-operator-fips, vault, versitygw, seaweedfs-fips, ratify, flux-source-controller-fips,...

GO-2026-5676 vulnerabilities

Vulnerabilities for packages: frp, coredns, jitsucom-bulker, ipfs-cluster, kubernetes-dns-node-cache, kyverno-policy-reporter, kyverno-policy-reporter-ui, k3s, k8sgateway, spegel, teleport, kargo, kubo, traefik, opentelemetry-operator, kube-metrics-adapter, q, dkron...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: frp, caddy, ipfs-cluster, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, k3s, k8sgateway, spegel, traefik, kargo, kubo, q, dkron...

GO-2024-2459 vulnerabilities

Vulnerabilities for packages: caddy, frp...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: frp, seaweedfs, caddy, buf, ipfs-cluster, kubernetes-dns-node-cache, k3s, k8sgateway, spegel, traefik, kargo, kubo, q, dkron...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: frp, caddy, buf, kubernetes-dns-node-cache, k3s, spegel, cloudflared, q...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, newrelic-infra-operator, crossplane-provider-aws-dynamodb, gostatsd, external-secrets-operator, nri-apache, istio, crossplane, harbor, snyk-cli, helm, kubo, buildah, crossplane-provider-aws-kms, docker-credential-acr-env, govulncheck,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k3d, newrelic-infra-operator, crossplane-provider-aws-dynamodb, gostatsd, kor, pgtimetable, timescaledb-parallel-copy, vertical-pod-autoscaler, wave, extism, mesosphere-vsphere-csi, kubo, rancher-telemetry, restic, amass, rabbitmq-default-user-credential-updater,...

CVE-2026-73564

creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:15+00:00| published-proof-of-concept| https://github.com/fatedier/frp/security/advisories/GHSA-26gq-p25f-99cp...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564

The CVE affects frp (frps) with the SSH Tunnel Gateway enabled. A root cause was an integer overflow in parsing an SSH exec channel: the code adds 4 to an attacker-controlled 4-byte length, and 0xFFFFFFFF wraps to 3, causing a bounds check bypass and a panic in TunnelServer.handleNewChannel. When...

GHSA-26GQ-P25F-99CP frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

Summary An integer-overflow vulnerability in the frp server's optional SSH Tunnel Gateway lets any unauthenticated remote attacker crash the entire frps process with a single five-byte message. When the gateway parses an SSH exec channel request in pkg/ssh/server.go, it adds a small constant to a...

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

Summary An integer-overflow vulnerability in the frp server's optional SSH Tunnel Gateway lets any unauthenticated remote attacker crash the entire frps process with a single five-byte message. When the gateway parses an SSH exec channel request in pkg/ssh/server.go, it adds a small constant to a...

Exploit for Use After Free in Linux Linux_Kernel

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant f...

CVE-2026-40910

frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, the routing logic uses the username from Proxy-Authorization to select the routeByHTTPUser...