110 matches found
cve-2023-44487
CVE-2023-44487 HTTP/2 Rapid Reset There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack starting many streams and immediately sending RSTSTREAM frame to avoid reaching MAXCONCURRENTSTREAMS. H2SpaceX I us...
CVE-2023-44487-dos
CVE-2023-44487 HTTP/2 Rapid Reset There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack starting many streams and immediately sending RSTSTREAM frame to avoid reaching MAXCONCURRENTSTREAMS. I use H2Space...
h2spacex
H2SpaceX Libreria HTTP/2 di basso livello basata su Scapy che può essere utilizzata per il Single Packet Attack Race Condition su H2 Questa libreria è stata parte di una ricerca accademica dal titolo QUIC-er Races: HTTP/3 won’t save you from TOCTOU vulnerabilities. Approfondimento sull'articolo...
CVE-2026-55200
libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to corrupt heap memory and achieve...
MiracleLinux 8 : corosync-3.1.8-1.el8_10.1 (AXSA:2026-593:02)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-593:02 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via...
PT-2026-32485
Name of the Vulnerable Software and Affected Versions AC800M System 800xA versions 6.0.0x through 6.0.0303.0 AC800M System 800xA versions 6.1.0x through 6.1.0031.0 AC800M System 800xA versions 6.1.1x through 6.1.1202.0 AC800M System 800xA versions 6.2.0x through 6.2.0006.0 Symphony Plus SD Series...
CVE-2026-26233 Denial of Service via HTTP/2 single packet attack on login endpoint
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cause denial of service server crash and restart via HTTP/2 single packet attack with 100+ parallel login requests...
CVE-2026-26233: Uncontrolled Resource Consumption
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cause denial of service server crash and restart via HTTP/2 single packet attack with 100+ parallel login requests...
CVE-2025-61983
Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 tmpserver modules allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network packet containing an excessive number of fields with zero‑length...
MiracleLinux 8 : libreswan-4.4-4.el8 (AXSA:2022-2989:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-2989:01 advisory. libreswan: Malicious IKEv1 packet can cause libreswan to restart CVE-2022-23094 Tenable has extracted the preceding description block directly from the...
CVE-2025-70304
A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...
EUVD-2014-8409
Malware in sbrugna...
EUVD-2020-22101
Malware in sbrugna...
EUVD-2017-7543
Malware in sbrugna...
EUVD-2012-3993
Malware in sbrugna...
EUVD-2015-6213
Malware in sbrugna...
EUVD-2014-3238
Malware in sbrugna...
EUVD-2020-4433
Malware in sbrugna...