ghostlock-s25fe

GhostLock CVE-2026-43499 для Galaxy S26 CVE-2026-43499, портированный на серию Samsung Galaxy S26 — Android 16 / GKI 6.12. Один бинарник, три строки ядра, динамическое сопоставление параметров во время выполнения: теоретически покрывает всю серию S26 без компиляции под каждую сборку. Большинство...

activemq-cve-lab

ActiveMQ Message Broker Обзор Приложение брокера сообщений ActiveMQ с функциональностью импорта/экспорта сообщений. Версия: 5.11.1 Возможности Управление очередями сообщений Статистика и мониторинг очередей Импорт/экспорт файлов сообщений Статус брокера в реальном времени Быстрый старт Docker...

PT-2026-102328

Name of the Vulnerable Software and Affected Versions GCC affected versions not specified Description A flaw exists in the libstdc++ library where calling the erase if function on a binary heap priority queue causes the library to reallocate storage without updating its internal entry pointer. Th...

CVE-2025-26466

CVE-2025-26466 poc for CVE-2025-26466 made by Fikret Can Gurbuz USAGE python3 poc.py -i -p These are the steps: 1. TCP connect to port 2. recieve server banner SSH-2.0-OpenSSHX.Xp1 3. send your client banner SSH-2.0-YourClient\r\n 4. send wrapsshpacketbuildkexinit 5. recieve server's KEXINIT...

CVE-2025-61765_PoC

Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...

CVE-2026-100658

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-100656

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-100608

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

EUVD-2026-87752

Netty io.netty:netty-codec-http contains an unbounded per-connection queue in WebSocketServerExtensionHandler. The handler offers an entry to its per-channel validExtensions queue for every inbound HttpRequest, but polls an entry only when the application writes an HttpResponse, and the queue siz...

CVE-2026-100656

...

CVE-2026-100656

The Netty library (io.netty:netty-codec-http ) contains an unbounded per-connection queue growth flaw in HttpServerCodec . The component tracks HTTP methods of unanswered pipelined requests; while the first 32 entries are bit-packed, additional entries are appended to an ArrayDeque (methodOverflo...

CVE-2026-100608

Flowise versions through 3.1.4 contain an authorization bypass in the BullMQ admin dashboard . When running in queue mode with the dashboard enabled (and not in cloud mode), the /admin/queues mount fails to perform role, permission, or workspace scoping checks because it only validates the JWT vi...

CVE-2026-100608 Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

CVE-2026-100608 Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

SUSE CVE-2026-98152

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backlog limit, the connect path only drops the device reference and leaks the newly allocated queue and its IB resources...

AZL-105323 CVE-2026-67421 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

CVE-2026-97865

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

DEBIAN-CVE-2026-100075

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters When srptallocrwctxs fails partway through a multi-buffer indirect descriptor, the unwind path destroys RDMA contexts but leaves stale nrwctx and nrdma values and a dangling rwctxs...

EUVD-2026-87093

The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based solely on a length check exactly 69 characters and a suffix check ending in ".onion", without performing proper hostname parsing or onion-domain...

CVE-2026-97865 Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...