16354 matches found
PT-2026-84823
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...
CVE-2016-9682
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:54+00:00| seen| https://t.me/hackingAttack/43422 2026-09-02 01:02:14+00:00| seen| https://t.me/hackingAttack/43422 2026-09-06 07:00:04+00:00| seen| https://t.me/hackingAttack/43422 2026-09-07 01:00:30+00:00| seen|...
SUSE CVE-2026-74628
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...
Important: Red Hat Security Advisory: iscsi-initiator-utils security update
An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket
A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...
openSUSE 16 Security Update : dhcpcd (openSUSE-SU-2026:21692-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21692-1 advisory. Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service bsc1268980. -...
TencentOS Server 4: libevent (TSSA-2026:0884)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0884 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
RHEL 9 : iscsi-initiator-utils (RHSA-2026:62029)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62029 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as th...
poc-container-escape
poccontainerescape Enumeración y explotación de vectores...
EUVD-2026-42312
Socket.IO: Engine.IO WebTransport SID DoS...
[SECURITY] Fedora 44 Update: kernel-7.1.12-200.fc44
The kernel meta package...
CVE-2026-65183
A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...
CVE-2026-26445
A flaw was found in stomper. A remote attacker can exploit this by sending partial STOMP Streaming Text Oriented Messaging Protocol frames. This action can cause the broker's sockets to enter a permanent half-read state. Consequently, the broker stops processing new messages, leading to a Denial ...
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...
Security update for dhcpcd (moderate)
openSUSE security update: security update for dhcpcd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21692-1 Rating: moderate References: bsc1268968 bsc1268974 bsc1268976 bsc1268980 Cross-References: CVE-2026-56113 CVE-2026-56115 CVE-2026-56116...
Important: vim
Issue Overview: Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in...
Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2026-2108)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2108 advisory. Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing...