CVE-2026-29115

CVE-2026-29115 — Аутентифицированное удаленное отказа в обслуживании Dahua Тип уведомления: Скоординированное раскрытие уязвимости с вендором CVE ID: CVE-2026-29115 Вендор: Dahua Technology Опубликовано: 2026-06-10T06:08:21 UTC Последнее изменение: 2026-06-10T06:08:21 UTC Источник: Центр доверия...

RLSA-2026:65116 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs...

RLSA-2026:64788 Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, video...

xz security update

An update is available for xz. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list XZ Utils is an integrated collection of user-space file compression utilities bas...

skopeo security update

An update is available for skopeo. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The skopeo command lets you inspect images from container image registries, g...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

RLSA-2026:65120 Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...

Bluetooth-Crash-CVE-2017-0785

CVE-2017-0785 Bluetoothモジュールクラッシュ このスクリプトは、https://github.com/ojasookert/CVE-2017-0785 の修正版です。 これは、範囲外のバイトによりSDPを介して情報を漏洩しますが、あまりに多くのパケットや検索リクエストを送信すると、Android 4.0以上のAndroidスマートフォンのBluetoothモジュールがクラッシュします。...

CVE-2020-13935

Apache Tomcat WebSocket 漏洞（CVE-2020-13935）的漏洞利用工具 在相应的博客文章中，详细解释了该漏洞的分析与利用方法。 用法 克隆仓库，然后构建 tcdos 二进制文件。按以下方式运行程序，以测试某个 WebSocket 端点是否存在漏洞： root@kitploit: $ git clone https://github.com/RedTeamPentesting/CVE-2020-13935 $ cd CVE-2020-13935 $ go build $ ./tcdos WebSocket endpoint...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler 스택 버퍼 오버플로우 DoS -orange -blue 📜 설명 CVE-2026-32743 은 PX4 Autopilot ≤1.17.0-rc2 버전의 MavlinkLogHandler에서 발생하는 스택 기반 버퍼 오버플로우 입니다. LogEntry.filepath 버퍼는 60바이트 에 불과하지만, sscanf는 폭 지정자width specifier 없이 로그 디렉터리 경로를 파싱합니다. MAVLink 링크 접근 권한 을 가진 공격자는 다음을 수행...

CVE-2014-0195

XML-RPC WordPress 브루트포스 익스플로잇 스크립트 이 저장소는 CVE-2014-0195에 취약한 WordPress 인스턴스의 로그인 자격 증명을 브루트포스하기 위한 Python 기반 개념 증명PoC을 포함합니다. XML-RPC의 system.multicall 함수를 악용하여 단일 HTTP 요청 내에서 여러 로그인 시도를 수행할 수 있으며, 이로 인해 서비스 거부DoS가 발생할 수 있습니다. 이 스크립트는 사이버보안 전문가가 WordPress 설치의 보안 상태를 평가하기 위해 사용하도록 설계되었습니다. 면책 조항 이...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - 보안 권고 15 - 00/00/06 프로그램: phpBB 2.0.15 홈페이지: http://www.phpbb.com 취약한 버전: phpBB 2.0.15 및 하위 버전 위험도: 고위험!! 영향: 다중 DoS 취약점. 설명 phpBB는 강력하고 완전히 확장 가능하며 고도로 사용자 정의할 수 있는 오픈 소스 게시판 패키지입니다. phpBB는 사용자 친화적인 인터페이스, 간단하고 직관적인 관리자 패널, 유용한 FAQ를 제공합니다. 강력한 PHP 서버 언어와 MySQL, MS-SQL,...