294 matches found
whatportis
whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...
CVE-2015-5377
CVE-2015-5377 Elasticsearch 1.5.2는 안전하지 않은 Java 역직렬화를 통해 RCE에 취약합니다. 익스플로잇은 9300 포트의 전송 프로토콜을 공격합니다. 역직렬화는 RCE를 달성하기 위해 Groovy MethodClosure 체인을 기반으로 합니다...
CVE-2014-3120
LAB 10-CVE-2014-3120 I. 시스템 분석 도커 환경에서 공격 표면 식별 실행 중인 환경을 확인하는 것으로 시작합니다. 모든 활성 컨테이너를 나열합니다: docker ps 결과: p1/lab10:latest 컨테이너가 실행 중이며, 외부에 2개의 포트 를 노출하고 있습니다: 포트 매핑| 프로토콜 ---|--- 0.0.0.0:9200 → 9200/tcp| HTTP 확인 필요 0.0.0.0:9300 → 9300/tcp| 알 수 없음 초기 관찰: 포트 9200과 9300은 일반적으로 Elasticsearch 의 기본 포...
CLEANSTART-2024-AM41653 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9
CVE-2023-48795 affects multiple packages. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9. See references for individual vulnerability details...
CLEANSTART-2024-IU89203 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9
Security vulnerability affects the buildah package. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: tipc: fixed a kernel panic that occurred when enabling a bearer. When enabling a bearer on a node, a kernel panic was observed: 4.498085 RIP: 0010:tipcmonprep+0x4e/0x130 tipc ... 4.520030 Call Trace: 4.520689 4.521236...
Audio Video Control Transport Protocol Elevation of Privilege Vulnerability
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...
PT-2026-87436
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...
CVE-2026-69401: Use After Free
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...
PT-2026-84853
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A malicious peer can send crafted messages after a channel has been established to cause a deadlock of the entire connection. This occurs because the system...
CVE-2026-68300 sctp: auth: verify auth requirement when auth_chunk is NULL
In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true unconditionally when chunk-authchunk is NULL, silently skipping authentication. This is incorrect when: 1. skbclone failed in the BH...
GHSA-28GM-JRMW-XX93 SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)
Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet and STUN attribute bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception in...
unbound: Unbound: Denial of Service via crafted DNSCrypt query
A flaw was found in Unbound, a domain name system DNS resolver. When Unbound is configured with DNSCrypt support, a remote attacker could send a specially crafted DNSCrypt query over TCP. This malicious query could cause a memory error, leading to a server crash and a Denial of Service DoS. This...
CVE-2026-16318 QUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tls
The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2nalloc instead of s2nrealloc to store the peer's transport parameters. When a TLS 1.3 connection goes through a HelloRetryRequest, the handler is called twice on the same connection. On the second call, s2nalloc zeroes...
SUSE-SU-2026:2989-1 Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmcrelease bsc1264094. - CVE-2026-43037: ip6tunnel: clear skb2-cb in ip4ip6err bsc1265197. -...
CVE-2026-54149 MaxKB MCP tool import validation bypass allows post-authentication remote code execution
MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/application/chatpipeline/step/chatstep/impl/basechatstep.py do not consistently validate MCP transport type, allowing an...
PT-2026-56562
Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.14.3 NATS Server versions prior to 2.12.12 Description An authenticated MQTT client can subscribe to the internal $MQTT.deliver.pubrel subject family. This action allows the client to bypass configured subscribe...
kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...
Siemens RUGGEDCOM RST2428P Incorrect Bitwise Shift of Integer (CVE-2025-40281)
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of- bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...
