CVE-2024-38473

Proof of Concept PoC for Encoding Problem in modproxy in Apache HTTP Server This repository contains Proof of Concept PoC scripts for demonstrating an encoding problem in the modproxy module of Apache HTTP Server versions 2.4.59 and earlier. This vulnerability allows request URLs with incorrect...

Cairn

Cairn More Than Just AI Penetration Testing — Towards General State-Space Search Cairn is a general-purpose problem-solving engine. It defines no roles, no workflows. Given an origin and a goal, it searches for a path through an unknown state space. AI Penetration Testing is one such problem — an...

kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

prism

Loaded Dice: Solving the Non-Selection Problem for Scalable Probabilistic RowHammer Defense To appear in the 53rd International Symposium on Computer Architecture ISCA, 2026. Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 University of British Columbia 2 NVIDIA Equal contribution...

CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

DEBIAN-CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

CVE-2026-67418 RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

PT-2026-114248

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.0 through 4.0.23 RabbitMQ versions 4.1.0 through 4.1.14 RabbitMQ versions 4.2.0 through 4.2.9 RabbitMQ versions 4.3.0 through 4.3.4 Description The MQTT 5 parser in deps/rabbitmq...

CVE-2026-67418: Improper Validation of Syntactic Correctness of Input

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

CLEANSTART-2026-OB27244 Encoding problem in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. Encoding problem in modproxy in Apache HTTP Server 2...

CLEANSTART-2026-CC29276 Security fix for GHSA-259r-337f-4rfw applied in: node-problem-detector 0.8.25-r1

Security vulnerability affects the node-problem-detector package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GD06163 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-KZ65595 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-YK40300 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-IN42122 Security fix for GHSA-hrxh-6v49-42gf applied in: external-secrets-operator-fips 2.7.0-r1, node-problem-detector 0.8.25-r1

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2023-5649

Brocade ASCG versions prior to v3.0 are vulnerable to an Improper Input Validation flaw (CVE-2023-5649) involving registered case credentials. A local authenticated user can provide invalid inputs, such as special characters, during the collection of "supportsave" from a Brocade Switch . This vul...

Losing gamblers pushed to bet more by DraftKings’ AI, report says

Two separate investigations have raised concerns about betting site DraftKings’ marketing to target problem gamblers, including its use of AI. On September 19, the New York Times reported that the company’s machine learning model targeted people who were more likely to respond to betting promotio...

Fedora 43 : openbao (2026-ccc419650a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ccc419650a advisory. Update to 2.6.3-2. Fixes privilege problem in the service file and cleans up default configuration file. ---- Update to 2.6.3. Includes fixes to multiple GHS...