Exploit for Deserialization of Untrusted Data in Facebook React

Reactor es una máquina Linux fácil centrada en ReactorWatch, un...

chain-reactor

Chain Reactor Chain Reactor es una herramienta de código abierto para probar la cobertura de detección y respuesta en máquinas Linux. La herramienta genera ejecutables que simulan secuencias de acciones como la creación de procesos y la conexión de red. Chain Reactor no asume experiencia previa e...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Spoiler warning. This is a full walkthrough including flags. If you want to solve the machine yourself, close this now and come back when you're stuck. Machine Info Field| Details ---|--- Name| Reactor OS| Ubuntu 24.04 LTS Noble Difficulty| Medium CVE| CVE-2025-55182 CVSS 10...

reactor

Reactor Reactor started as a fork of the open source project ElastAlert. The maintainer of this project should keep close tabs on the changes to ElastAlert excluding their additional alerters and ensure that any relevant bugs fixes be patched in and any useful feature ported in. Reactor is an...

CLEANSTART-2026-GT11567 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials

Security vulnerability affects the elasticsearch package. In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials...

CLEANSTART-2026-JY60048 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled

Security vulnerability affects the elasticsearch package. In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled...

CLEANSTART-2026-CL63424 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver

Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver...

Security Bulletin: Vulnerabilities in Netty,jackson-databind,Angular,bootstrap,React Router,decode-uri-component,Reactor Netty,Spring WebFlux,Spring Framework,spring-web might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, jackson-databind, Angular, bootstrap, React Router, decode-uri-component, Reactor Netty, Spring WebFlux, Spring Framework,spring-web. Vulnerabilities include allowing the renamed JSON key to be assigned...

CLEANSTART-2026-DT37851 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials

Security vulnerability affects the elasticsearch package. In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials...

CLEANSTART-2026-ZC51583 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled

Security vulnerability affects the elasticsearch package. In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled...

CLEANSTART-2026-IJ88105 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver

Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver...

CLEANSTART-2026-CQ96086 In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials

Security vulnerability affects the elasticsearch package. In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in JSoup, Elytron, Reactor, BouncyCastle and zstd-jni Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in...

CVE-2026-47843

A flaw was found in Reactor Netty. In specific scenarios, when multiple clients use different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. This can lead to traffic being routed incorrectly, potentially impacting the intended destination of...

CVE-2026-47874

A flaw was found in the Reactor Netty HTTP server. A remote attacker can exploit this vulnerability by sending HTTP/1.1 pipelined requests over a single connection. This action causes the server to consume an excessive amount of memory, leading to a Denial of Service DoS...

io.projectreactor/reactor-core: Reactor Core: Denial of Service via Flux.windowTimeout operator with fairBackpressure

A flaw was found in Reactor Core. A remote attacker could exploit this vulnerability by using the Flux.windowTimeout operator with fairBackpressure enabled, leading to a Denial of Service DoS condition. This could cause applications to become unresponsive or crash...

io.projectreactor/reactor-core: Reactor Core: Denial of Service in bufferTimeout operator

A flaw was found in Reactor Core. Applications using the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. This occurs when upstream components deliver items during an active flush, causing the processing pipeline to permanently hang an...

io.projectreactor/reactor-core: Reactor Core: Denial of Service via Flux.windowTimeout operator with fairBackpressure

A flaw was found in Reactor Core. A remote attacker could exploit this vulnerability by using the Flux.windowTimeout operator with fairBackpressure enabled, leading to a Denial of Service DoS condition. This could cause applications to become unresponsive or crash...

io.projectreactor/reactor-core: Reactor Core: Denial of Service in bufferTimeout operator

A flaw was found in Reactor Core. Applications using the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. This occurs when upstream components deliver items during an active flush, causing the processing pipeline to permanently hang an...

Security Bulletin: Vilunarabilities found in reactor-netty-http-1.2.13.jar in APIM

Summary reactor-netty-http-1.2.13.jar - In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. These are addressed in IBM webMethods Developer Portal and IBM webMethods API ControlPlane Vulnerability Details...