wotop

Web-On-Top-Of-Protocol WOTOP ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a tool meant to...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）dos This bug exploit a memory error when sending too many \r\n in a single connexion. Example $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080: Connection refused...

org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation

A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory OOM error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of...

CLEANSTART-2026-LQ16834 maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error

Security vulnerability affects the ollama package. A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error...

CLEANSTART-2026-VX45596 maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error

Security vulnerability affects the rclone package. A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error...

php2shell-lab

php2shell-lab Lab reproduction, exposure probe and detectio...

SUSE CVE-2026-99006

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec array boundary It is possible for ebrelocateparseslow to call kvfree on entries outside the original exec array during following scenario inside ebrelocateparseslow: 1 ebcopyrelocations...

Linux Distros Unpatched Vulnerability : CVE-2026-98911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: fix the error path in dpaa2switchrx In case of an error in dpaa2switchrx, the dpaa2switchfreefd function is called in order to free the FD. This i...

CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

EUVD-2026-109562

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-99006 drm/i915/gem: Prevent overstepping exec array boundary

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec array boundary It is possible for ebrelocateparseslow to call kvfree on entries outside the original exec array during following scenario inside ebrelocateparseslow: 1 ebcopyrelocations...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-shield 한국어 Stopgap protection for...

CLSA-2026-1792599451 Fix CVE(s): CVE-2026-109618, CVE-2026-109619

SECURITY UPDATE: code execution via state corruption after an out-of-memory error and via stale global state - debian/patches/CVE-2026-109618.patch: terminate the process on memory limit and allocation overflow errors instead of unwinding, clear request globals at shutdown, disable session upload...

CLSA-2026-1792599426 Fix CVE(s): CVE-2026-109618, CVE-2026-109619

SECURITY UPDATE: code execution via state corruption after an out-of-memory error and via stale global state - debian/patches/CVE-2026-109618.patch: terminate the process on memory limit and allocation overflow errors instead of unwinding, clear request globals at shutdown, disable session upload...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path calls putdevice, which ultimately invokes the device’s release function. However, the initialization order is...

CVE-2026-98548: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and the peer sends a bundled ERRORStale CookieDATA packet from one of its non-primary addresses, processing the ERROR chun...

[SECURITY] [DLA 4840-1] jq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4840-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 16, 2026 https://wiki.debian.org/LTS -...

Debian dla-4840 : jq - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4840 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4840-1 [email protected] https://www.debian.org/lts/security/...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9kwmirspcallback Fix a stack-out-of-bounds write that occurs in a WMI response callback function called after a timeout occurs in ath9kwmicmd. The callback writes to...

SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4531-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4531-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...