Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

Vulnerability-scanner

随着组织对数字技术的依赖程度日益加深，用于通信、数据存储和业务运营的网络安全威胁显著增加。鉴于端点安全软件在保护网络和系统方面扮演的关键角色，此类软件已成为恶意行为者的首要攻击目标。因此，任何影响广泛部署的端点保护软件的漏洞，都有可能影响全球数百万台计算机。 本项目的目标是分析已在国家漏洞数据库（NVD）中于2026年5月20日发布的、经核实的微软 Defender 反恶意软件平台中的拒绝服务（DoS）漏洞 CVE-2026-45498。该漏洞的 CVSS 评分为 4.0（中危）。在确认攻击者已积极利用该漏洞后，它被添加到了 CISA 已知被利用漏洞（KEV）目录中。受影响的是运行版本低...

CVE-2026-82722 AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashadmin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's setacto...

EUVD-2026-68325

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashadmin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's setacto...

CVE-2026-82604

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...

http2-bomb

HTTP/2 炸弹 - CVE-2026-49975 一个针对 HTTP/2 服务器的拒绝服务（DoS）概念验证。通过将 HPACK 放大与流保持相结合，一台拥有普通网络连接的机器即可在数秒内使存在漏洞的服务器不可用。 漏洞 CVE： CVE-2026-49975 标题： Apache HTTP Server：modhttp2 拒绝服务 官方描述： Apache HTTP Server 的 modhttp2 模块中存在一个过大内存分配漏洞（CWE-789），允许通过特制的 HTTP 请求发起拒绝服务攻击。 受影响版本： Apache HTTP Server 2.4.17 至 2.4.67...

EUVD-2026-68323

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...

CVE-2026-82605

CVE-2026-82605 affects BareBones BBEdit versions up to 15.5.5 , specifically the Lasso Language Tokenizer component. The vulnerability causes an infinite loop when processing crafted Lasso language input, leading to a denial-of-service condition. The attack can be executed remotely but requires u...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 快速重置检测器 PoC 描述 此工具是 CVE-2023-44487 （又称 HTTP/2 快速重置攻击 ）的概念验证（PoC）程序。该漏洞允许攻击者通过 HTTP/2 连接快速发送 RSTSTREAM 帧来执行拒绝服务（DoS）攻击，从而使目标服务器不堪重负。 功能特性 单 URL 测试 ：测试单个 URL 是否存在漏洞。 批量 URL 测试 ：测试文件中提供的多个 URL。 HTTP 与 HTTPS 支持 ：同时支持 HTTP 和 HTTPS 协议。 自定义端口选择 ：为测试指定自定义端口。 输出选项 ：结果可保存为 CSV、TXT 或...

CVE-2026-39047

CVE-2026-39047: Framework de explotación del protocolo RAW de impresoras Epson Repositorio: https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 Script PoC: poc.py Objetivo simulado: mockprinter.py Autor: J4ck3LSyN Descripción general Este framework demuestra la vulnerabilidad CVE-2026-39047 : un...

CVE-2026-54992-PoC

CVE-2026-54992 PoC Microsoft Message Queuing のリモート読み取り整数オーバーフロー（CVE-2026-54992 として追跡）の概念実証。 この PoC は 2 台の Windows VM を使用します。脆弱なターゲット上の通常のユーザーが、ローカルの MSMQ サービスに対して、ヘルパーがホストするキューから読み取るよう要求します。ヘルパーが不正な形式の MS-MQRR 応答を返し、ターゲット上の mqsvc.exe がクラッシュします。この PoC はサービス拒否を実証します。コード実行は実証しません。 Root cause mqqm.dl...

CVE-2020-10558

CVE-2020-10558：特斯拉 Model S/3/X 拒绝服务 DoS 安全研究员： Jacob Archuleta @nullze 📝 漏洞概述 在特斯拉 Model 3、Model S 和 Model X（所有早于 2020.4.10 的版本）中发现了一个严重的拒绝服务 DoS 漏洞。该漏洞允许远程攻击者通过精心构造的网页使基于 Chromium 的信息娱乐系统 MCU 崩溃，导致关键车辆功能丧失，包括： 速度表显示 气候控制 Autopilot 可视化和警报 转向信号音视频反馈 🛠️ 技术分析 该漏洞源于车辆内置浏览器对特定 Web...

CVE-2025-27237

CVE-2025-27237 Zabbix Agent/Agent2 for Windows における OpenSSL 設定ファイルのハイジャックによるローカル権限昇格の脆弱性。 概要 フィールド| 値 ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: 制御されない検索パス要素 タイプ| ローカル権限昇格 ベンダー| Zabbix Zabbix Agent for Windows は、低権限ユーザーが書き込み可能なハードコードされたパス C:\vcpkg... から OpenSSL...

CVE-2026-82579

CVE-2026-82579 is an infinite loop vulnerability in the ash_ai Elixir/Erlang library (versions 0.6.0 through before 1.0.0 ), affecting the AshAi.ToolLoop component. When all tool calls are filtered out—either due to a missing valid name or a reused tool_call_id—the loop recurses with a byte-ident...