255 matches found
openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to abuse the server to amplify network traffic in a Denial of Service DoS attack. When the server is configured without client address validation, incoming datagrams containing multiple QUIC packets cause the server to...
openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to abuse the server to amplify network traffic in a Denial of Service DoS attack. When the server is configured without client address validation, incoming datagrams containing multiple QUIC packets cause the server to...
CVE-2026-35191
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to abuse the server to amplify network traffic in a Denial of Service DoS attack. When the server is configured without client address validation, incoming datagrams containing multiple QUIC packets cause the server to...
CVE-2026-30784-rustdesk-poc
CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs 流量放大 PoC & PCAP 分析 关键发现 关键发现: 强制使用密钥认证(-k )无法阻止 此放大攻击,因为放大响应是在未经身份验证的初始握手/ping阶段触发的。 PCAP 文件位置 数据包捕获文件位于: data/attackonly.pcap.gz PCAP 捕获上下文与详情 ⚠️ 关于数据包捕获的重要说明: 为防止服务器在分布式僵尸网络攻击中被进一步用作主动放大器,rustdesk-server(hbbs)+(hbbr)服务在捕获前/捕获期间已完全停止。...
CVE-2026-87011 Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST /oauth/backchannel-logout handler in backend/openwebui/utils/oauth.py fetched the OIDC discovery document and signing keys before validating a submitted logout...
Exploit for CVE-2026-30784
CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs Traf...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42255: Incorrect Provision of Specified Functionality
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
PT-2026-35197
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
EUVD-2014-0122
Malware in sbrugna...
EUVD-2010-5041
Malware in sbrugna...
EUVD-2019-19113
Malware in sbrugna...
EUVD-2008-1923
Malware in sbrugna...
EUVD-2015-7693
Malware in sbrugna...
EUVD-2008-1897
Malware in sbrugna...