136622 matches found
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
network-forensics
Network Forensics Investigations Blue-team network-forensics...
EUVD-2026-94680
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly...
CVE-2026-94582
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly...
CVE-2026-87681
An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...
EUVD-2026-94655
An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...
CLEANSTART-2026-JY60048 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled
Security vulnerability affects the elasticsearch package. In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled...
PT-2026-108174
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based buffer overflow exists in the MongoDB protocol parser. A remote attacker can trigger memory corruption by sending a specially crafted MongoDB SCRAM username with ...
CVE-2026-87665: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...
EulerOS 2.0 SP15 : libwebsockets (EulerOS-SA-2026-3990)
According to the versions of the libwebsockets packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lwssshparseplaintext of the file...
PT-2026-107780
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...
PT-2026-108173
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based out-of-bounds read exists in the TDS7 LOGIN7 protocol parser. A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet that contains...
EulerOS 2.0 SP15 : libwebsockets (EulerOS-SA-2026-3924)
According to the versions of the libwebsockets packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lwssshparseplaintext of the file...
PT-2026-108113
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.3 Description A protection mechanism failure exists in the HLS demuxer. This issue allows attackers to bypass protocol and allowed extensions restrictions when opening child playlists. By providing a crafted master...
CVE-2026-107697: Protection Mechanism Failure
FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...
SUSE SLES16: libwireshark18 / libwiretap15 / libwsutil16 / wireshark / etc (SUSE-SU-2026:24013-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24013-1 advisory. Update to Wireshark 4.4.18: - CVE-2026-19694: TTX Logger file parser crash bsc1275279. - CVE-2026-19695: Gammu DCT3 trace file...
PT-2026-108148
Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions prior to 3.2.5 MariaDB Connector/Node.js versions prior to 3.3.4 MariaDB Connector/Node.js versions prior to 3.4.7 MariaDB Connector/Node.js versions prior to 3.5.4 Description Text-protocol escaping fails to...
NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint
NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.3.8...
EUVD-2026-91667
Next.js has information disclosure in development server's Model Context Protocol endpoint...
Next.js has information disclosure in development server's Model Context Protocol endpoint
The Next.js development server next dev exposes a Model Context Protocol endpoint that does not verify which website a request originates from, allowing a malicious website visited by the developer to read sensitive development data — including the project's location on disk, source code snippets...