CVE-2025-31700: Buffer Copy without Checking Size of Input

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

PT-2026-7969

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could cause the Vnet/IP software stack process to terminate when receiving specially crafted network packets. Recommendatio...

Wireshark Denial of Service Vulnerability (CNVD-2025-30216)

Wireshark is a very popular network packet analyzer that intercepts various network packets and displays packet details. A denial of service vulnerability exists in Wireshark. The vulnerability exists in Wireshark's column processing feature. When Wireshark attempts to process network packets or...

CVE-2019-9678

Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X fo...

CVE-2019-20045

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. Specially crafted malicious packets could cause disconnection of active authentic connections or reboot of device. This is a different issue than CVE-2019-16879 and...

kernel: slip: make slhc_remember() more robust against malicious packets

A flaw was found in the Linux kernel. The slhcremember function, which handles Serial Line Internet Protocol SLIP header compression, did not properly validate incoming packet sizes and headers. A local attacker could exploit this by sending specially crafted malicious packets, leading to an...

Exploit for Memory Allocation with Excessive Size Value in Apache Activemq

CVE-2025-27533-Exploit-for-Apache-ActiveMQ PoC exploit for...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in the decodeFromBytes function for MRT BGP4MPHeaders in mrt.go. A local attacker can cause unexpected behavior by sending malicious packets. Remediation Upgrade...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oombfqq CVE-2022-49179 In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev CVE-2022-49390 In the Linux kernel, the following vulnerability has...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oombfqq CVE-2022-49179 In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev CVE-2022-49390 In the Linux kernel, the following vulnerability has...

Eclipse ThreadX NetX Duo HTTP server denial of service vulnerability

Talos Vulnerability Report TALOS-2024-2098 Eclipse ThreadX NetX Duo HTTP server denial of service vulnerability April 14, 2025 CVE Number CVE-2025-2260,None SUMMARY A denial of service vulnerability exists in the NetX HTTP server functionality of Eclipse ThreadX NetX Duo git commit 6c8e9d1. A...

CVE-2025-21591

A Buffer Access with Incorrect Length Value vulnerability in the jdhcpd daemon of Juniper Networks Junos OS, when DHCP snooping is enabled, allows an unauthenticated, adjacent, attacker to send a DHCP packet with a malformed DHCP option to cause jdhcp to crash creating a Denial of Service DoS...

Linux Distros Unpatched Vulnerability : CVE-2024-50033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slip: make slhcremember more robust against malicious packets syzbot found that slhcremember was missing checks against malicious packets 1. slhcremember only...

CVE-2025-1674

A lack of input validation allows for out of bounds reads caused by malicious or malformed packets...

CVE-2025-1674 Out of bounds read when unpacking DNS answers

A lack of input validation allows for out of bounds reads caused by malicious or malformed packets...

CVE-2025-1674

CVE-2025-1674 is a vulnerability in Zephyr RTOS (Zephyr project) arising from insufficient input validation that allows out-of-bounds reads when processing malicious or malformed packets. Public details from multiple sources indicate the issue affects Zephyr up to version 4.0 and earlier. The nat...

CVE-2025-1059

CVE-2025-1059 is associated with Schneider Electric ASCO 5310/5350 Remote Annunciator products. The connected sources describe an Allocation of Resources Without Limits or Throttling vulnerability that could cause communications to stop on the device webserver when malicious packets are received ...

CVE-2025-1059

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device...

CVE-2025-1059

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device...

PT-2025-6803 · Unknown · Enerlin'X Ife Interface

Name of the Vulnerable Software and Affected Versions: Enerlin'X IFE interface LV434001 versions all Description: The issue is related to improper input validation, which could cause a Denial-of-Service when malicious ICMPV6 packets are sent to the device. Recommendations: For all versions, at th...