Lucene search
+L

16108 matches found

osv_ghsa
osv_ghsa
•added 2025/03/31 9:47 p.m.•29 views

GHSA-HQQC-JR88-P6X2 Netty QUIC hash collision DoS attack

An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. See...

5.3CVSS5.9AI score0.0059EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/03/31 9:47 p.m.•37 views

Netty QUIC hash collision DoS attack

An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. See...

5.3CVSS5.9AI score0.0059EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/03/31 7:15 p.m.•50 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.0059EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/31 6:43 p.m.•12 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS5.9AI score0.0059EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/31 6:43 p.m.•61 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.0059EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/31 6:43 p.m.•30 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS5.9AI score0.0059EPSS
SaveExploits0References5
CVE
CVE
•added 2025/03/31 6:43 p.m.•108 views

CVE-2025-29908

CVE-2025-29908 affects the Netty QUIC codec (netty-incubator-codec-quic) which uses quiche. The issue is a hash collision in the hash map that manages connections, allowing a remote attacker to induce a Hash DoS by initiating connections with colliding Source Connection IDs (SCIDs), causing consi...

5.3CVSS5.9AI score0.0059EPSS
SaveExploits0References3
Mend
Mend
•added 2025/03/31 6:43 p.m.•18 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

6.9CVSS5.9AI score0.0059EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/03/31 12:00 a.m.•26 views

Virtuoso-OpenSource itc_hash_compare DoS

The vulnerability of the itchashcompare component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.5AI score0.00592EPSS
SaveExploits1References4Affected Software2
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•32 views

Netty QUIC codec security vulnerability

Netty QUIC codec is a new experimental QUIC codec for Netty open source. A security vulnerability exists in versions prior to Netty QUIC codec 0.0.71.Final, which stems from a hash collision vulnerability that could lead to excessive server CPU load...

5.3CVSS5.8AI score0.0059EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•10 views

CVE-2025-29908: Inefficient Algorithmic Complexity

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS6AI score0.0059EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/31 12:00 a.m.•22 views

SCF file processing NTLM hash

The vulnerability of the SCF-file processing mechanism in Windows operating systems is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a remote attacker to reveal the NTLM hash when a user opens a folder containing a specially crafted SCF-file...

7.8CVSS6.7AI score
SaveExploits0References1
Circl
Circl
•added 2025/03/30 8:36 p.m.•22 views

CVE-2025-2954

creationtimestamp| type| source ---|---|--- 2025-03-30 20:36:07+00:00| seen| https://t.me/cvedetector/21516 2025-03-31 13:31:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9644...

5.5CVSS5.2AI score0.00172EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/30 6:36 p.m.•26 views

CVE-2025-2920

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS4.3AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/28 6:15 p.m.•23 views

CVE-2025-2920

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS0.00133EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/28 6:00 p.m.•19 views

CVE-2025-2920 Netis WF-2404 passwd weak hash

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS4.3AI score0.00133EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/28 6:00 p.m.•73 views

CVE-2025-2920

CVE-2025-2920 affects Netis WF-2404 (firmware 1.1.124EN). The issue involves processing of the file /etc/passwd leading to use of a weak hash. Impact is described as low confidentiality impact with local, physical access required; attack complexity is high and exploitation is difficult. Public di...

2CVSS4.3AI score0.00133EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/03/28 6:00 p.m.•50 views

CVE-2025-2920 Netis WF-2404 passwd weak hash

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS0.00133EPSS
SaveExploits0References4
Veracode
Veracode
•added 2025/03/28 10:50 a.m.•30 views

MD5 Hash Collisions

sagemaker is vulnerable to MD5 Hash Collisions. The vulnerability is due to weak hashing in workflow identification due to the reuse of results from different configurations that produce the same MD5 hash, potentially leading to unintended workflow replacements and integrity issues...

5.9CVSS6.2AI score0.00265EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•12 views

PT-2025-13599

Name of the Vulnerable Software and Affected Versions Netty QUIC codec versions prior to 0.0.71.Final Description A hash collision vulnerability in the Netty QUIC codec allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source Connectio...

5.3CVSS5.8AI score0.0059EPSS
SaveExploits0References13
Rows per page
Query Builder