548 matches found
sshprank
Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr, ip range or...
domain-protect
domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...
CVE-2026-121294
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit PDU that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting in S-BFD session timeouts...
CVE-2026-121294
Affected platforms running Arista EOS with a S-BFD reflector proxy configured are vulnerable to a flaw where an unauthenticated attacker can send a crafted S-BFD Protocol Data Unit (PDU) . This action might cause the device to temporarily stop reflecting S-BFD packets, potentially leading to S-BF...
EUVD-2026-122815
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit PDU that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting in S-BFD session timeouts...
CVE-2026-121294 Security Advisory 0223
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit PDU that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting in S-BFD session timeouts...
PT-2026-144645
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit PDU that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting in S-BFD session timeouts...
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeouts
A flaw was found in Apache Tomcat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting lost timeouts for asynchronous WebSocket writes. This can lead to the affected system becoming unresponsive or unavailable...
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeouts
A flaw was found in Apache Tomcat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting lost timeouts for asynchronous WebSocket writes. This can lead to the affected system becoming unresponsive or unavailable...
CVE-2026-122306
A flaw was found in Kyverno. An authenticated attacker with policy creation privileges can cause a Denial of Service DoS by submitting policies containing crafted wildcard patterns. When evaluated, these complex patterns consume excessive processor resources, resulting in admission controller...
Kyverno resource management error vulnerability
Versions prior to Kyverno 1.19.2 contain a resource management error vulnerability. This vulnerability arises because namespace policy authors can submit pathological wildcard patterns to create policies with specially crafted match and exclude names, which are then evaluated via...
CVE-2026-119179
A flaw was found in the MongoDB Node.js driver. This vulnerability allows an unauthenticated remote attacker to trigger information disclosure, incorrect data processing, or service disruption in applications that enable client-side operation timeouts. Because network connections can be returned ...
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeouts
A flaw was found in Apache Tomcat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting lost timeouts for asynchronous WebSocket writes. This can lead to the affected system becoming unresponsive or unavailable...
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeouts
A flaw was found in Apache Tomcat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting lost timeouts for asynchronous WebSocket writes. This can lead to the affected system becoming unresponsive or unavailable...
p5-Starman -- multiple vulnerabilities
Starman project reports: SECURITY Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824 Parse chunk-size lines in linear time with a 4 KiB length limit and strict syntax; malformed lines get 400 CVE-2026-115822 Do not send a response body...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 4.4. It stems from the bnxten driver failing to adjust the length of the DMA mapping after filling packets in bnxtstartxmit; this allows hardware DMA reads to exceed the mapped buffer boundaries, potentially leading to IOMMU failures and...
CLSA-2026-1792500675 Fix CVE(s): CVE-2026-107885
SECURITY UPDATE: job submission timeouts suppressed by an in-flight Send-Document request - debian/patches/CVE-2026-107885.patch: record the submission deadline in job-pendingtimeout in createjob and stop deferring the timeout in cupsdCheckJobs once that deadline has passed - CVE-2026-107885...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Set HCICMDDRAINWORKQUEUE during device close Since hcidevclosesync can now be called during the reset path, we should also set HCICMDDRAINWORKQUEUE. This prevents queuing timeouts while the hdev workqueue is...
CLSA-2024-1725872696 kernel: Fix of 43 CVEs
netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 - x86/sev: Harden VC instruction emulation somewhat CVE-2024-25742 - bpf: Avoid uninitialized value in BPFCOREREADBITFIELD CVE-2024-42161 - selftests/bpf: Fix BPFCOREREADBITFIELD macro CVE-2024-42161 - pinctrl:...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel before version 5.17.3, fs/iouring.c contains a use-after-free issue due to a race condition related to iouring timeouts. This issue can be triggered by a local user who does not have access to any user namespace. However, the race condition may only be exploited infrequently...