CVE-2026-16001 IesEngine stream-mode MAC forgery via length-dependent KDF split

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

CVE-2026-16001 IesEngine stream-mode MAC forgery via length-dependent KDF split

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

EUVD-2026-91206

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

CVE-2026-16001 IesEngine stream-mode MAC forgery via length-dependent KDF split

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS プログラムコード Python/http2 クライアント + サーバー http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET, socket.SOREUSEADDR, 1 sock.bind'0.0.0.0...

CVE-2026-104183

A flaw was found in stream-json. When parsing JSON data, the Assembler component directly assigns properties, allowing an input key named 'proto' to replace a parsed object's internal prototype rather than creating a standard property. An attacker who supplies crafted input can exploit this...

CVE-2026-104182

A flaw was found in stream-json. A local attacker can cause a Denial of Service DoS by providing JSON with Comments JSONC input containing large comments split across multiple small chunks. The parser repeatedly rescans accumulated comment data from the beginning for each chunk, leading to...

RabbitMQ 3.13.x < 3.13.18 / 4.0.x < 4.0.23 / 4.1.x < 4.1.14 / 4.2.x < 4.2.9 / 4.3.x < 4.3.3 Multiple Vulnerabilities

The version of RabbitMQ installed on the remote host is 3.13.x prior to 3.13.18, or 4.0.x prior to 4.0.23, or 4.1.x prior to 4.1.14, or 4.2.x prior to 4.2.9, or 4.3.x prior to 4.3.3. It is, therefore, affected by multiple vulnerabilities: - The JWKS key fetching mechanism in uaajwt.erl does not...

RabbitMQ 4.1.x < 4.1.11 / 4.2.x < 4.2.9 / 4.3.x < 4.3.3 Super Stream Binding Keys Denial of Service

The version of RabbitMQ installed on the remote host is 4.1.x prior to 4.1.11, or 4.2.x prior to 4.2.9, or 4.3.x prior to 4.3.3. It is, therefore, affected by a denial of service vulnerability: - The stream management HTTP API handler for super stream creation PUT...

PT-2026-104102

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

Detections-CVE-2026-23918

이동 예정: https://github.com/insomnisec/publiccvedetections 탐지 게시물의 장기적인 관리를 위해 이 저장소는 2026년 6월에 제거됩니다 앞으로는 다른 저장소를 사용해 주세요 CVE-2026-23918 "Apache HTTP/2 Double-Free" — 탐지 및 대응 패키지 게시일: 2026-05-04 CVSSv3: 8.8 높음 유형: 원격 코드 실행 / 서비스 거부 Double-Free 메모리 손상 구성 요소: Apache HTTP Server modhttp2 h2mplx.c 스트림...

CVE-2026-104182

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, the JSONC parser at stream-json/jsonc/parser.js and verifier at stream-json/jsonc/verifier.js restart comment-terminator scanning from the opening slash whenever a...

CVE-2026-104183

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with plain assignment, so an input key named proto invokes the inherited setter and causes parsed object prototype replacemen...

CVE-2025-8671-vulnerability-POC-

CVE-2025-8671-vulnerability-POC- CVE-2025-8671 脆弱性のPOC CVE-2025-8671 脆弱性スキャナー MadeYouReset 脆弱性（CVE-2025-8671）をHTTP/2サーバーで検出するためのプロフェッショナルなセキュリティ研究ツールです。このスキャナーは複数の検出ヒューリスティックを用いて、ストリームアカウンティング操作攻撃に対して脆弱なサーバーを特定します。 🔍 CVE-2025-8671 について MadeYouReset 脆弱性は、不正なプロトコル違反によってサーバーに RSTSTREAM...

xtor

xtor Tor 인스턴스를 프로그래밍 방식으로 관리하는 Python 라이브러리입니다. 기능 새 Tor 프로세스 시작 또는 기존 프로세스에 연결 SOCKS5 프록시가 포함된 사전 구성된 httpx 클라이언트 동기 + 비동기 새 IP를 기다리는 옵션을 포함한 ID 회전 트래픽 분리를 위한 스트림 격리 회로 및 스트림 관리 종료 노드 정보 국가, 대역폭, 플래그 임시 히든 서비스 .onion 이벤트 리스너 회로, 스트림, 대역폭 이벤트 라운드 로빈 및 무작위 선택을 지원하는 여러 인스턴스 관리를 위한 TorPool CLI 관리를...

GO-2026-6550 SIPGO: DoS via unvalidated Content-Length in the stream parser in github.com/emiago/sipgo

SIPGO: DoS via unvalidated Content-Length in the stream parser in github.com/emiago/sipgo...

CVE-2026-104183 stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with plain assignment, so an input key named proto invokes the inherited setter and causes parsed object prototype replacemen...

CVE-2026-104183

The stream-json micro-library (versions prior to 3.6.0 ) is vulnerable to a prototype pollution flaw within its Assembler component. The root cause is the use of plain assignment to materialize object properties, which allows an input key named __proto__ to invoke an inherited setter. This result...

CVE-2026-102667

Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...

CVE-2026-104183 stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with plain assignment, so an input key named proto invokes the inherited setter and causes parsed object prototype replacemen...