CVE-2026-85848: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

CVE-2026-85832: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

PT-2026-112797

Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Background Intelligent Transfer Service BITS, which allows an authorized attacker to elevate...

PT-2026-112809

Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Background Intelligent Transfer Service BITS, which allows an authorized attacker to elevate...

PT-2026-112957

Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS affected versions not specified Description A race condition occurs due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

CVE-2026-88118: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

Important: bind

Issue Overview: For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized...

Important: python-pip

Issue Overview: urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigge...

Important: python-urllib3

Issue Overview: urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigge...

Amazon Linux 2023 : python3.13-pip, python3.13-pip-wheel (ALAS2023-2026-3172)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3172 advisory. urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser...

Important: python-urllib3

Issue Overview: urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigge...

Important: python3.11-pip

Issue Overview: urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigge...

Amazon Linux 2 : python-pip (ALAS-2026-3974)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3974 advisory. urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers...

Important: python3.14-pip

Issue Overview: urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigge...

Important: python3.13-pip

Issue Overview: urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigge...

Amazon Linux 2 : bind (ALAS-2026-3995)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3995 advisory. For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer...

PT-2026-110657

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.11.0 through 3.32.0 Description A reachable assertion issue exists in the urb isoch transfer function. A malicious RDP server can cause the client to crash by sending unvalidated OutputBufferSize values. Specifically, an...

subjack

subjack Escáner de Toma de Control DNS Subjack es un escáner de toma de control DNS escrito en Go, diseñado para escanear una lista de dominios de forma concurrente e identificar aquellos que pueden ser secuestrados. Gracias a la velocidad y eficiencia de Go, esta herramienta destaca especialment...

ssh-mitm

SSH-MITM - auditorías ssh simplificadas Una herramienta interactiva de intercepción SSH para auditorías de seguridad autorizadas. Intercepta sesiones, monitoriza el tráfico en vivo, inyecta comandos y manipula transferencias de archivos — todo en tiempo real. !Follow me on...

dnsrecon

DNSRecon DNSRecon es un puerto en Python de un script en Ruby que escribí para aprender el lenguaje y sobre DNS a principios de 2007. Esta vez quería aprender sobre Python y ampliar la funcionalidad de la herramienta original y, en el proceso, reaprender cómo funciona DNS y cómo podría usarse en ...