Lucene search
+L

439 matches found

Kitploit
Kitploit
added 2026/09/15 8:15 a.m.10 views

chaos

chaos chaos는 RST가 ChatGPT와 협력하여 개발한 'origin' IP 스캐너입니다. 주로 침투 테스터와 버그 헌터를 대상으로 하는 전문 유틸리티입니다. Origin-IP는 타사를 통해 공개적으로 제공되는 웹사이트의 최종 공용 IP 대상을 설명하는 전문 용어입니다. Origin-IP에 관심이 있는 이유를 더 알고 싶다면 블로그 게시물을 확인하세요. chaos는 ChatGPT와의 DevOps 원칙을 사용하여 24시간 이내에 아이디어에서 기능적인 개념 증명까지 신속하게 프로토타이핑되었습니다. root@kitploit...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 12:09 a.m.110 views

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 12:09 a.m.6 views

webscan

webscan webscan은 브라우저 기반 네트워크 IP 스캐너이자 로컬 IP 탐지기입니다. WebRTC를 통해 RTP 데이터 채널에서 수신 대기하고 활성 IP로 포트에 다시 루프백하여 사용자/피해자에게 바인딩된 IP를 탐지하며, 유효한 서브넷의 모든 활성 IP 주소를 fetch 호출 또는 유효한 서브넷/IP를 가리키는 숨겨진 img 태그로부터의 즉각적인 시간 초과반환된 TCP RST 패킷를 모니터링하여 발견합니다. 모바일 및 데스크톱에서 모든 주요 브라우저와 OS에서 작동합니다. 베타 버전은 여러 기술을 추가할 수 있도록 ...

6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-57226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - detect/filedata: heap buffer overflow in SWF decompression depth handling CVE-2026-57226 Note that Nessus relies o...

SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/26 5:57 a.m.24 views

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

8.2CVSS5.8AI score0.00971EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/26 4:08 a.m.10 views

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

8.2CVSS5.8AI score0.00971EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Jetty9

In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, and =12.1.0alpha2, an HTTP/2 client may trigger the server to send RSTSTREAM frames. This can happen by sending frames that are malformed or should not be sent under certain stream states, thereby forcing the server to consume...

7.7CVSS6.8AI score0.03457EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/17 12:00 a.m.11 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099988 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An...

8.2CVSS6AI score0.00971EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/11 7:24 p.m.13 views

CVE-2026-68118

A flaw was found in the Linux kernel's handling of TCP Transmission Control Protocol connections. A remote attacker could send a specially crafted TCP Reset RST packet during the SYN-RECEIVED state. This could cause the system to prematurely remove connection requests instead of issuing a challen...

8.2CVSS5.4AI score0.00391EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 1:19 p.m.10 views

AZL-95003 CVE-2026-68118 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

8.2CVSS5.8AI score0.00391EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/10 1:19 p.m.11 views

UBUNTU-CVE-2026-68118

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

8.2CVSS5.2AI score0.00391EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/10 1:19 p.m.21 views

CVE-2026-68118

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

8.2CVSS5.5AI score0.00391EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 11:58 a.m.25 views

CVE-2026-68118 tcp: challenge ACK for non-exact RST in SYN-RECEIVED

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

8.2CVSS5.4AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/10 12:00 a.m.19 views

PT-2026-69518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tcp check req function within the SYN-RECEIVED request-socket path. The system accepts an in-window RST Reset packet without requiring the SEG.SEQ variable to...

8.2CVSS5.3AI score0.00391EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-68118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to...

8.2CVSS5.9AI score0.00391EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/22 9:32 p.m.21 views

Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

The SpdyHttpDecoder handler in Netty's SPDY-to-HTTP codec allocates a pooled ByteBuf when processing a client-initiated SYNSTREAM frame with FLAGFIN=0, storing the partially-constructed FullHttpRequest in an internal map messageMap to accumulate subsequent DATA frames. When the remote peer sends ...

8.7CVSS5.4AI score0.00612EPSS
SaveExploits0References7Affected Software1
Snyk
Snyk
added 2026/07/21 11:57 p.m.18 views

Allocation of Resources Without Limits or Throttling

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the SpdyHttpDecoder. An attacker can...

8.7CVSS5.8AI score0.00612EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/21 10:17 p.m.10 views

DEBIAN-CVE-2026-56745

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the SpdyHttpDecoder handler in Netty's SPDY-to-HTTP codec allocates a pooled ByteBuf when processing a client-initiated...

7.5CVSS5.4AI score0.00612EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/21 9:31 p.m.44 views

CVE-2026-56745 Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the SpdyHttpDecoder handler in Netty's SPDY-to-HTTP codec allocates a pooled ByteBuf when processing a client-initiated...

8.7CVSS0.00612EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/07/21 9:31 p.m.16 views

CVE-2026-56745

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the SpdyHttpDecoder handler in Netty's SPDY-to-HTTP codec allocates a pooled ByteBuf when processing a client-initiated...

8.7CVSS5.4AI score0.00612EPSS
SaveExploits0
Rows per page
Query Builder