CVE-2026-77322

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...

CVE-2026-77322

The SIPGO library (prior to version 1.4.3 ) is vulnerable to a Denial of Service (DoS) attack via unvalidated WebSocket frame lengths. The root cause is located in sip/transport_ws.go, where WSConnection.Read creates a wsutil.Reader without setting the MaxFrameSize parameter. This allows an unaut...

WaSonar

Disclaimer : This tool is for educational purposes and security research only. The developers are not responsible for misuse. Please use responsibly and ethically. WaSonar is a powerful CLI tool designed for educational research, device tracking, and stress testing on the WhatsApp protocol. Built...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.15 packages and security update

Red Hat OpenShift Container Platform release 4.22.15 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

CVE-2025-15467

CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...

libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames e.g., PING, PONG, CLOSE contain a payload of 125 bytes or less. A remote, unauthenticated attacker...

CVE-2026-34040-PoC

CVE-2026-34040 — Обход AuthZ-плагина Docker/Moby лабораторный PoC KO: Лабораторный проект, воспроизводящий уязвимость, которая обходит плагины авторизации AuthZ Docker Moby с помощью тела запроса размером более 1 МБ. EN: Лабораторная репродукция уязвимости, обходящей плагины авторизации AuthZ...

CVE-2023-50965

💥 CVE-2023-50965 — Эксплойт переполнения буфера стека Linux Proof of Concept эксплойт для CVE-2023-50965 , демонстрирующий переполнение буфера стека, приводящее к удалённому выполнению кода RCE на уязвимых системах без включённых механизмов смягчения эксплойтов. Этот проект создан для исследовани...

citrix_bleed_2

PoC-сканер Citrix Bleed 2 CVE-2025-5777 Этот скрипт представляет собой сканер Proof-of-Concept PoC для гипотетической уязвимости «Citrix Bleed 2» CVE-2025-5777. Он предназначен для обнаружения потенциальных утечек памяти на устройствах Citrix ADC путём отправки запросов увеличенного размера и...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux 커널 TUN/TAP 수신 헤드룸 메모리 손상 TUN/TAP 네트워킹 서브시스템 의 Linux 커널 메모리 손상 취약점으로, 수신 헤드룸에 대한 불충분한 경계 설정과 패킷 할당 경로의 정수 언더플로우로 인해 발생합니다. ⚠️ 면책 조항 이 저장소는 승인된 보안 연구, 취약점 분석, CTF 환경, 커널 디버깅 및 방어적 테스트를 위해 제공됩니다. 명시적인 승인 없이 시스템에 대해 개념 증명 코드를 사용하지 마십시오. 📌 취약점 개요 CVE 권고는 이 문제를...

cve-2025-24035-rds-websocket-dos-test

CVE-2025-24035 Тест нагрузки WebSocket Безопасный 🚨 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ : Это НЕ эксплойт. Этот скрипт является симуляцией и должен использоваться только в образовательных целях в безопасной лабораторной среде. Назначение Этот тест отправляет намеренно увеличенный заголовок WebSocket для...

CVE-2026-93393 Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming...

Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to, or an attacker able to impersonate or redirect the client's connection, can cause the driver to write...

Moderate: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames e.g., PING, PONG, CLOSE contain a payload of 125 bytes or less. A remote, unauthenticated attacker...

RLSA-2026:68266 Moderate: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation CVE-2026-15711 For more details about the security issues, including the impact, a...

libsoup security update

An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...

libsoup security update

An update is available for libsoup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit Небольшой тестовый клиент на Python для отправки HTTP GET-запросов с заголовком Authorization: Basic увеличенного размера. Этот инструмент предназначен для лабораторного тестирования и исследований проблем разбора заголовков например, ошибок разыменования нулевого указателя ...