CVE-2026-106105 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only...

CVE-2026-106105

The Quasar Framework contains a vulnerability where the @quasar/ssl-certificate utility caches combined private keys and certificates without applying owner-only filesystem permissions . This occurs in versions prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0....

CVE-2026-106105 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only...

DNS-Poisoning-Triage-Lab

DNS 与 ARP 流量分类实验 在 Arch Linux 工作站上完成的网络安全教育性数据包分析及解析器加固练习。 范围： 本仓库是一个学习项目。附带的流量捕获可用于练习 DNS 和 ARP 检查，但它本身不能 证明存在实时的缓存投毒攻击、恶意硬件、对特定 CVE 的利用，或与 NetworkManager 路由度量存在因果关系。 我为何修订此项目 我的第一版分析将若干观察结果视为已确认的成因。那过于武断了。一个 839 字节的 DNS 帧并不自动意味着畸形或恶意，而 DNS-over-TLS 保护的是发往所配置上游解析器的 DNS 流量——它并不能阻止 ARP 欺骗或所有二层/三层攻...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda 硬编码 TLS 私钥 CNVD ID： CNVD-2026-25884 厂商： 深圳市吉祥腾达科技有限公司 产品： NVR4H 网络录像机（硬件版本 CH3V2.1） 固件： V27.5.58.6 类别： CWE-321 — 使用硬编码加密密钥 概述 NVR4H 固件将其 ECDSA 密钥对存储于只读的 user-x.squashfs 分区中（挂载于 /opt/app/）：私钥位于 /etc/privkey.pem，匹配的自签名证书位于 /etc/cacert.pem。两者均在构建时生成一次并固化到镜像中，因此所有运行 V27.5.58.6...

CVE-2026-105794

MsQuic , a cross-platform C implementation of the IETF QUIC protocol, contains an improper certificate validation vulnerability (CWE-295) in versions prior to 2.4.20, 2.5.11, and 2.6.1 . When using the OpenSSL or QuicTLS TLS backends, the software fails to verify that a server certificate matches...

CVE-2026-105794 MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-pat...

heartbleed-vulnerability-exploitation

heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...

heartbleed-lab

Heartbleed 实验室 用于研究 Heartbleed 漏洞的教育实验室 （CVE-2014-0160）通过 Docker 内真实的易受攻击 OpenSSL 环境进行实验。 本项目使用 OpenSSL 1.0.1f 复现了一个易受攻击的 TLS 服务器，并实现了一个自定义的原始 TLS 心跳客户端，用于演示畸形心跳数据包如何触发内存泄露。 该实验室专为教育和研究目的而创建，尤其适用于研究： TLS 记录帧结构 心跳扩展解析 内存泄露漏洞 解析器信任失败 跨协议的帧结构不一致 Heartbleed 与 HTTP 反同步漏洞之间的概念相似性 当前项目结构 heartbleed-lab/...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

CVE-2026-0257

CVE-2026-0257：GlobalProtect 身份验证绕过 概述 此漏洞利用仅通过服务器的公开可用 TLS 证书 伪造身份验证 cookie，实现对 Palo Alto GlobalProtect 网关/门户的未经身份验证的 VPN 访问 。 核心漏洞（为何有效） GlobalProtect 使用预身份验证 cookie （portal-userauthcookie）允许客户端进行身份验证。以下是致命缺陷： 正常流程： 1. 客户端进行身份验证（用户名 + 密码） 2. 服务器生成 cookie → 使用服务器的 RSA 公钥加密 3. 客户端存储加密后的 cookie 4...

SUSE-SU-2026:4544-1 Security update for libtcnative-1-0, tomcat11

This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. - CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...

DEBIAN-CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

EUVD-2026-93202

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...