CVE-2026-102821 Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSHMSGKEXINIT without the required SSHMSGKEXECDHINIT and then flood SSHMSGCHANNELOPEN messages while SessionKexState::InProgress prevents priorityreceiver in russh/src/server/session.rs from bein...

CVE-2026-102821

The Russh Rust SSH library (prior to version 0.63.2 ) is vulnerable to unbounded memory exhaustion during a client-stalled rekey. An authenticated remote peer can send SSH_MSG_KEXINIT without the required SSH_MSG_KEX_ECDH_INIT and flood SSH_MSG_CHANNEL_OPEN messages. Because SessionKexState::InPr...

http2-rst-stream-attacker

CVE-2023-44487 y http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 es un exploit contra el propio protocolo HTTP2. En HTTP2, las solicitudes de datos se inician enviando un frame HEADERS. Tras recibir este frame, un servidor comenzará a procesar tu solicitud, enviando posteriormente frames...

USN-8847-1 openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled certain certificate revocation list distribution point names. An attacker could possibly use this issue to cause OpenSSL to consume excessive memory, resulting in a denial of service. CVE-2026-35189 It was discovered that OpenSSL incorrectly...

USN-8847-1: OpenSSL vulnerabilities

It was discovered that OpenSSL incorrectly handled certain certificate revocation list distribution point names. An attacker could possibly use this issue to cause OpenSSL to consume excessive memory, resulting in a denial of service. CVE-2026-35189 It was discovered that OpenSSL incorrectly...

EUVD-2026-89203

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

CVE-2026-102820 pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

CVE-2026-102820

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

CVE-2026-102820 pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

CVE-2026-102820

The pageant Windows crate (prior to version 0.2.3 ) contains an out-of-bounds read and oversized allocation vulnerability in the MemoryMap::read function located at pageant/src/wmmessage.rs. The root cause is that the function trusts a peer-controlled u32 response length provided via an 8192-byte...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

reflector

reflector Descripción La extensión de Burp Suite es capaz de encontrar XSS reflejado en la página en tiempo real mientras se navega por el sitio web e incluye algunas características como: Resaltado de la reflexión en la pestaña de respuesta. Prueba de qué símbolos están permitidos en esta...

eclipse__hawkbit_CVE-2020-27219_0-3-0M6

Eclipse hawkBit™ - Servidor de Actualizaciones Eclipse hawkBit es una solución de backend independiente del dominio para implementar actualizaciones de software en dispositivos de borde con recursos limitados, así como en controladores y puertas de enlace más potentes conectados a infraestructura...

CVE-2026-102677

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

Medusa

Welcome to Medusa 👉关于美杜莎 本项目使用 GPL协议，未经授权，禁止使用商业用途。 Web Alpha 版本已上线 请下载releases版本使用，master分支正在重构前端（预计2022年底上线） 中文文档 |EnglishDocumentation 💡使用文档 http://medusa.ascotbe.com 📋安装说明 https://medusa.ascotbe.com/Documentation//Installation 👾Web界面 🍀更新日志 http://medusa.ascotbe.com/Documentation//UpDataLog...

DDos_Attack.py

NetSTRIK - Herramienta de Ataque DDoS ⚡ NetSTRIK es una potente herramienta de ataque DDoS Denegación de Servicio Distribuida que simula tráfico intenso para probar la robustez y seguridad de servidores, redes y sitios web bajo estrés. Está diseñada para ayudar a los probadores de penetración,...

GHSA-CXF4-7MRP-VVPR Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

Related public issue context, not a duplicate Closed issue 1429 "Handle non-UTF-8 paths", 2024-03-24 raised exactly this general concern and even suggested detection via pregmatch'//u', $path !== 1 -- note the reporter's suggested check explicitly compares !== 1, which would correctly treat PCRE'...

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

Related public issue context, not a duplicate Closed issue 1429 "Handle non-UTF-8 paths", 2024-03-24 raised exactly this general concern and even suggested detection via pregmatch'//u', $path !== 1 -- note the reporter's suggested check explicitly compares !== 1, which would correctly treat PCRE'...

R4venzCl4w

R4venzCl4w ◣◢ノ-=≡≡卍 Un marco modular para Pentesters y Bug Hunters escrito en Python3. Tabla de Contenidos R4venzCl4w ◣◢ノ-=≡≡卍 Tecnologías y Herramientas Requisitos Características Implementación de Características Instalación Configuración Uso Opciones Ejemplo Pendientes Contribuciones Licencia ...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...