429 matches found
CVE-2026-49975
Strumento di riproduzione CVE-2026-49975 HTTP/2 Bomb Autore : polar bear Versione : 2.1 Vulnerabilità applicabile : CVE-2026-49975 bomba di memoria del protocollo HTTP/2 📖 Principio della vulnerabilità CVE-2026-49975 è una vulnerabilità di esaurimento della memoria nell'implementazione del...
CVE-2026-59320
CVE-2026-59320 affects Spring AMQP 4.1.0 . When a container-level ErrorHandler is configured, each delivery whose message processing throws an exception permanently consumes one link credit without replenishing it. After the receiver exhausts its initialCredits (default 100 ), the broker stops de...
EUVD-2026-67201
When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...
CVE-2026-74742
A flaw was found in the Linux kernel's veth component. In a multi-queue setup without an eXpress Data Path XDP program attached, the vethpoll function incorrectly derives the index of the peer transmit TX queue to wake. This can cause a TX queue to stop indefinitely if it becomes full, as the...
EUVD-2026-66572
In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...
CVE-2026-49975-POC
CVE-2026-49975 — PoC della Bomba HTTP/2 Exploit proof-of-concept per CVE-2026-49975, una vulnerabilità di denial-of-service remota nelle implementazioni del server HTTP/2. Scoperto da Quang Luong Calif Security Research, divulgato il 2 giugno 2026. Solo per test di sicurezza autorizzati. Non...
linnix
Linnix Finde heraus, welcher Prozess deinen SLOs schadet — nicht nur, wer CPU nutzt, sondern wer Stalls verursacht. Das Problem top zeigt 80 % CPU. Prometheus zeigt hohe Latenz. Aber welcher Pod blockiert eigentlich deinen Zahlungsdienst? Linnix verwendet eBPF + PSI Pressure Stall Information , u...
CVE-2026-74742
In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...
CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll
In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...
CVE-2026-74742
Linux kernel veth has a bug where veth_poll() derives the peer TX queue index from rq->xdp_rxq.queue_index, a field only populated when an XDP program is attached. On the plain GRO/NAPI path the value stays 0 for every queue. In a multi-queue setup with GRO enabled and no XDP, all NAPI pollers...
CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll
In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...
http2-bomb-analysis-paper
HTTP/2 Bomb: Ataque em Cadeia de Amplificação de Referência Indexada HPACK Um mergulho técnico independente de um estudante de ensino médio Junho de 2026 TL;DR Este repositório contém minha análise completa da vulnerabilidade HTTP/2 Bomb CVE-2026-49975 / CVE-2026-47774, que encadeia duas primitiv...
CVE-2026-78701
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
CVE-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
CVE-2026-78701
CVE-2026-78701 affects 389-ds-base , where an incomplete fix related to CVE-2026-11610 in the SASL UNBIND process allows a remote, authenticated attacker to send a specially crafted request that causes a connection to stall. This leads to resource exhaustion and a Denial of Service for the server...
CVE-2026-78701
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: net/sched: fqpie: prevent dismantle issue For some reason, the fqpieDestroy function did not copy the working code from pieDestroy and other related functions, resulting in a persistent bug. Before calling...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7921 – Fixed a skb leak caused by missing txs in AMSDU. Txs may be dropped if the frame is aggregated in AMSDU. When this problem occurs, some SKBs are held by the driver, causing the network to stop temporarily. Ev...
SUSE CVE-2026-74626
In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...