CVE-2026-55484

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484

ALOS HTTP , a Linux-first Go web framework with a custom networking stack, is vulnerable to an unauthenticated remote denial-of-service . The root cause is an unchecked p[0] access in core/utils.go::sanitizeRequestPath after splitPathQuery processes a path beginning with a question mark, leaving ...

EUVD-2026-67872

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Advisory di sicurezza: Denial of Service remoto tramite assert raggiungibile nella gestione dei prefissi URL rouille ID CVE assegnato: CVE-2026-66754 Sommario Request::removeprefix verifica l'URL percent-decodificato ma esegue l'assert su quello grezzo. Una richiesta il cui percorso decodificato...

CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions

CVE-2026-28992: Condizioni di gara in IOHIDFamily FastPathUserClient CVE-2026-28992 | Autore: Johnny Franks @zeroxjf Componente: IOHIDFamily Impatto: Un attaccante potrebbe causare la terminazione imprevista di un'app Descrizione: Una vulnerabilità di corruzione della memoria è stata risolta...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है CVE-2016-1827 के लिए, जिसे OS X El Capitan 10.11.5 और iOS 9.3.2 में पैच किया गया था। यह कमजोरी फंक्शन flowdiverthandleappmapcreate में यूज़र स्पेस से आपूर्ति की गई एक अविश्वसनीय लंबाई पर अनियंत्रित अंकगणितीय...

CVE-2026-43499-PoC-Scanner

CVE-2026-43499 PoC-Scanner Dieses Repository enthält einen Go-basierten Scanner und eine Proof-of-Concept-Implementierung für eine Linux-Kernel-Sicherheitslücke im Zusammenhang mit CVE-2026-43499. Das Projekt ist ausschließlich für Forschung, defensive Analyse und autorisierte Sicherheitstests...

ScreenOff

ScreenOff CVE-2026-52910 PoC di crash del kernel. riferimento: https://github.com/5unkn0wn/security-research/tree/CVE-2026-52910ltscosmitigation Cosa socket + SOATTACHREUSEPORTCBPF + setsockopt race condition. La tempesta di callback timerfd/epoll rallenta il percorso di ricezione. Sostituire il...

CVE-2020-9283

Exploit für CVE-2020-9283 Dieses Projekt ist vom ursprünglichen POC hier github.com/mark-adams/exploits/CVE-2020-9283 inspiriert. Ich war neugierig, wie die Go-SSH-Bibliothek implementiert ist, und habe mich daher entschieden, den PoC mit Go umzusetzen. Eine kurze Beschreibung findet sich hier...

GenEtherExploit

PT GenEtherExploit é um exploit de Prova de Conceito PoC para a vulnerabilidade do macOS CVE-2023-40404. Este PoC utiliza APIs do IOKit para interagir com o serviço de rede IOUserEthernetResource, manipulando as interfaces de rede do sistema. O objetivo deste exploit é demonstrar um possível pâni...

CVE-2026-43499

CVE-2026-43499 — Uso-dopo-liberazione in Futex PI del Kernel Linux Bug removewaiter in kernel/locking/rtmutex.c viene usata dai percorsi slowlock ma anche per il rollback del proxy-lock in rtmutexstartproxylock quando invocata da futexrequeue. Nel caso del proxy-lock, waiter::task non è current, ...

CVE-2026-82250

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the clien...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

CVE-2026-82250

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation triggered when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to cause an index out of bounds panic , aborting the client p...

EUVD-2026-67702

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the clien...

CVE-2026-82250 gitoxide gix-packetline before 0.21.5 Denial of Service

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the clien...

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC für CVE-2023-6931 Beschreibung CVE-2023-6931 ist eine Schwachstelle in perfevent, die zu einem Heap-Pufferüberlauf führt, verursacht durch einen Integer-Überlauf im readsize einer Gruppe. Was ist ein Performance-Ereignis perf event? perfevents ist ein vom Linux-Kern...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

EUVD-2026-67658

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...