Updated python-hpack packages fix a security vulnerability

An issue was found in the python-hyper/hpack library, most commonly used as a downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively...

Updated clamav packages fix security vulnerabilities

An indexing error while converting GPT partition names that could read or write beyond a stack-allocated partition entry. CVE-2026-20345 An integer overflow in the PESpin unpacker that could allocate an undersized buffer and then write beyond it while rebuilding a PE file. CVE-2026-20339 An integ...

MGASA-2026-0349 Updated python-hpack packages fix a security vulnerability

An issue was found in the python-hyper/hpack library, most commonly used as a downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively...

CVE-2026-14697

CVE-2026-14697 is a packet-leak denial-of-service in Zephyr RTOS . The function net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c permanently leaks a transmit net_pkt when called with a data packet pending on an unresolved neighbor whose pending_queue is already non-empty: it appends the data packet...

EUVD-2026-68744

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14697 IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14697 IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-82797

A flaw was found in rlottie. This uncontrolled recursion vulnerability allows a local attacker to cause a denial of service DoS by providing specially crafted serialized data with nested payloads. Successful exploitation requires user interaction to process the malicious data. Mitigation Update...

CVE-2022-0778

CVE-2022-0778 Descripción Nos referimos al concepto de drago-96 y luego reescribimos un PoC basado en el formato P12 y PEM. Puede usarlo para verificar las vulnerabilidades CVE-2022-0778, es decir, un certificado SSL peligroso sin contraseña privada, déjelo vacío. Si el dispositivo está afectado,...

CVE-2026-14696

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14367

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

CVE-2023-31308

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...

CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata

CVE-2026-3333 – DNS 重绑定以窃取云元数据 程序代码（Python 攻击者服务器 + 易受攻击的应用） root@kitploit: !/usr/bin/env python3 dnsrebindingserver.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254 import socket, threading, time This simple server resolves any subdomain of our domain to...

CVE-2026-14696

Zephyr RTOS Ethernet bridging contains an RX packet leak in eth_bridge_input_process() (subsys/net/l2/ethernet/bridge/bridge_input.c). When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), frames delivered to the local stack via eth_bridge_handle_locally() return NET_OK without actually...

EUVD-2026-68728

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2023-31014_Lab

CVE-2023-31014 Implicit Intent Hijacking Lab NVIDIA GeForce NOW for Android の CVE-2023-31014 公開レポートに基づいて作成した教育用 Android Lab です。NVIDIA のソースコード、実際の Action 文字列、実際の認証情報は含まれていません。 公開レポートで確認できる事実 対象: NVIDIA GeForce NOW Android mobile/TV アプリ 影響を受けるバージョン: 6.00.32705137 6.04.33108832 修正済みバージョン:...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc 単なるBSOD,OS再起動に使用されます;...

CVE-2026-68763

A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...

CVE-2023-31308

A malicious virtual function can invoke certain command handlers in the SMU , causing a denial of service due to an out-of-bounds memory read . Per AMD's CVSS 3.1 rating, the impact is LOW (3.3) with a local attack vector requiring low privileges and no user interaction, affecting only availabili...