CVE-2026-73493 http4s-blaze-server: Unbounded WebSocket message aggregation

Http4s http4s-blaze-server is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A client that completes a WebSocket handshake can send an...

CVE-2026-72568

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...

Missing Authorization

Apache ActiveMQ is vulnerable to a Missing Authorization vulnerability. The vulnerability is due to temporary destination isolation being enforced only on the client side, which allows an attacker to bypass the authorization check and consume messages from another connection's temporary destinati...

SUSE-SU-2026:3598-1 Security update for dracut

This update for dracut fixes the following issue: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432...

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to improper inbound filtering of SQS message attributes, which allows an attacker who can send messages to the SQS queue to inject arbitrary Camel control headers, potentially influencing downstream producers such a...

CVE-2026-73214

A flaw was found in coturn. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by sending specially crafted fragmented ClientHello messages. The coturn server retains OpenSSL Datagram Transport Layer Security DTLS session state for these messages before...

Improper Input Validation

Apache Camel Kafka component is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of Kafka control headers, where attacker-controlled kafka. headers can override the configured Kafka topic, partition, or timestamp, allowing unauthorized message redirecti...

CVE-2026-68433

In the Linux kernel, the following vulnerability has been resolved: libceph: bound getversion reply decode to front len handlegetversionreply uses msg-frontalloclen as the decode boundary for MONGETVERSIONREPLY. That is the size of the reused reply buffer, not the number of bytes actually receive...

Black Hat USA 2023 Conference Slides

Black Hat USA 2023 conference slides for topics Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs?, Diversity Microtalks: Perspectives on Creating Change, ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing,...

PT-2026-80500

In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gss accept sec context on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse nego message...

PT-2026-80501

In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss accept sec context on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the proces...

OffensiveCon25 Conference Slides

OffensiveCon25 conference slides for topics Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing, How Offensive Security Made Me Better at Defense, Finding and Exploiting 20-Year-Old Bugs in Web Browsers, and Entrysign: Create Your Own x86 Microcode for Fun and Profit...

CVE-2026-73493: Allocation of Resources Without Limits or Throttling

Http4s http4s-blaze-server is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A client that completes a WebSocket handshake can send an...

PT-2026-70947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An uninitialized memory read exists in the handle get version reply function. The issue occurs because the function uses msg-front alloc len as the decode boundary for MON GET VERSION...

AlmaLinux 9 : frr10 (ALSA-2026:49607)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:49607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's...

PT-2026-71477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.10 PostgreSQL versions 18.0 through 18.4 Description Improper enforcement of message integrity in GSSAPI support allows a user to negotiate GSSAPI in a manner that contradicts pg hba.conf rules during an...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

DEBIAN-CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...