30853 matches found
EUVD-2026-72777
A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
CVE-2026-79377
A heap overflow vulnerability exists in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware (v3.x and earlier). An attacker can exploit this by sending a crafted L2CAP packet to cause a Denial of Service (DoS) . No specific exploitation details or remedi...
CVE-2026-79378
The Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC is vulnerable in its firmware v3.x and earlier due to an issue in the btm_acl_handle() function. An attacker can trigger a Denial of Service (DoS) by sending a crafted L2CAP packet . While the CVSS score indicates a High severity (7.5) with a Ne...
CVE-2022-51015 PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket
PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket for STARTBREAK and CRACKBREAK actions or in UseItemTransactionData typically within InventoryTransactionPacket. A remote authenticated attacker can send crafted packets with invalid facing values e.g., negative or...
CVE-2022-51012 PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization
PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service...
[slackware-security] libpcap
New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpcap-1.10.7-i586-1slack15.0.txz: Upgraded. This libpcap release fixes a number of vulnerabilities. For more information, see:...
CVE-2026-84732: Integer Overflow or Wraparound
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow...
TencentOS Server 4: bluez (TSSA-2026:0960)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0960 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
libpcap 1.10.7
Libpcap is a portable packet capture library which is used in many packet sniffers, including tcpdump...
CVE-2022-51009: Uncaught Exception
PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash...
CVE-2026-18238
The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper validation of register indexes in the Berkeley Packet Filter interpreter. An attacker can access and modify arbitrary memory by supplying a crafted filter program. Remediation A fix was pushed into the...
SUSE CVE-2026-52856
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...
SUSE CVE-2026-80765
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...
SUSE CVE-2026-80837
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't queue packet path object notifications All file:line references below are against v7.2-rc4 ac5b0e5651b1. The trace was captured on 7.2.0-rc6-kasan72rc6 075b74841bd0, where the same lines apply...
PT-2026-86441
Name of the Vulnerable Software and Affected Versions rpcap affected versions not specified Description The rpcap client code incorrectly validates headers when processing a RPCAP MSG PACKET message received from a server. A malicious server can send a crafted message, causing the client to treat...
CVE-2026-86098
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...
DEBIAN-CVE-2026-86098
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...
CVE-2026-86098 ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...
CVE-2026-86098
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...