209 matches found
rustdesk
Servidores • Compilar • Docker • Estructura • Capturas de pantalla English | Українська | česky | 中文 | Magyar | فارسی | Français | Deutsch | Polski | Indonesian | Suomi | മലയാളം | 日本語 | Nederlands | Italiano | Русский | Português Brasil | Esperanto | 한국어 | العربي | Tiếng Việt | Ελληνικά Necesitam...
RendezvousRAT
Información Este repositorio contiene dos RAT de prueba de concepto mínimos que utilizan GO, basados en los ejemplos encontrados en go-libp2p-examples Actualmente, el RAT está destinado a hosts linux. Sin embargo, pueden compilarse para windows modificando la variable de compilación de go. Puede...
AZL-100856 CVE-2026-89604 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...
CVE-2026-89146
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...
EUVD-2026-76035
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...
CVE-2026-89146 libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...
CVE-2026-89146
CVE-2026-89146 affects the Rust libp2p-rendezvous library (versions through 0.17.1 ). The library fails to validate registration TTL values in discovery responses, so a malicious rendezvous server can send an unbounded TTL that triggers a timer arithmetic overflow , causing the client node proces...
CVE-2026-77638
A flaw was found in Tor. A remote attacker could exploit a race condition within the rendezvous point mechanism to impersonate an onion service. This man-in-the-middle attack allows the attacker to intercept and potentially alter communications between a client and the intended onion service,...
SUSE CVE-2026-77638
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
Linux Distros Unpatched Vulnerability : CVE-2026-77638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service...
CVE-2026-77638
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
DEBIAN-CVE-2026-77638
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
EUVD-2026-63647
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
CVE-2026-77638
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
CVE-2026-77638
Tor before 0.4.9.11 has a rendezvous-point race condition allowing a relay to impersonate an onion service and intercept client traffic, yielding HIGH confidentiality/integrity impact (CVSS 8.9). No in-the-wild exploitation is documented; upgrade to 0.4.9.11 to remediate.
CVE-2026-77638
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
PT-2026-79148
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle impersonate the onion service that the client was trying to reach...
Malicious code in gcli-control (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...
PYSEC-2026-355 Horovod Vulnerable to Command Injection
Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, a subclass of KVStoreHandler. Specifically, the putvalue method in ElasticRendezvousHandler...
CVE-2026-35457
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, the rendezvous server stores pagination cookies without bounds. An unauthenticated peer can repeatedly issue DISCOVER requests and force unbounded memory growth. This vulnerability is fixed i...