CVE-2025-65122

creationtimestamp| type| source ---|---|--- 2026-05-06 19:39:33+00:00| seen| https://gist.github.com/6en6ar/66ef99397068c0a5e0d963bc47d7172c 2026-05-06 19:46:52+00:00| seen| https://gist.github.com/6en6ar/bdc8e0d472406ab98431f10273cbdbf3 2026-05-07 17:06:16+00:00| seen|...

netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

A flaw was found in Netty. A remote user can trigger a Denial of Service DoS against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server's lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume...

netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

A flaw was found in Netty. A remote user can trigger a Denial of Service DoS against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server's lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume...

CVE-2026-20034

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nupzno2f 2026-05-06 17:23:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pbe23t2k 2026-05-06 19:30:10+00:00| seen|...

CVE-2026-20188

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nnixcb2r 2026-05-06 17:22:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ozpiwb2r 2026-05-07 00:53:19+00:00| seen|...

CVE-2026-20185

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ngnlrb2r 2026-05-06 17:22:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77osaodu2t 2026-05-07 00:53:19+00:00| seen|...

CVE-2026-5081

creationtimestamp| type| source ---|---|--- 2026-05-06 17:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml76h2e3pn2j 2026-05-06 17:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76ilwkxd2g...

[SECURITY] Fedora 42 Update: pdns-5.0.4-1.fc42

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

CVE-2026-4882

creationtimestamp| type| source ---|---|--- 2026-05-06 15:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml6zko2ybi2c 2026-05-06 15:33:07+00:00| seen| https://bsky.app/profile/potato.software/post/3ml6zkokpcu2c 2026-05-16 15:00:07+00:00| published-proof-of-concept|...

Exploit for Double Free in Apache Http_Server

This is a proactive tool for security auditing. For your GitHub...

CVE-2026-43080

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol subsystem. This vulnerability allows a remote attacker to send an oversized PPPoL2TP packet with UDP encapsulation. Due to an overflow in the 16-bit UDP length field, the packet's length is incorrectly truncated, which can lea...

BIT-JAVA-MIN-2022-21549

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated...

BIT-JAVA-2020-2659

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols...

BIT-JAVA-2020-14593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2026-42220

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /api/settings and retrieve sensitive configuration values, including node.secret. The same node.secret is accepted by AuthRequired through the X-Node-Secret header or nodesecret...

kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

A flaw was found in the Linux kernel's NFSv4.0 server nfsd. A remote, unauthenticated attacker can exploit this heap overflow vulnerability in the NFSv4.0 LOCK replay cache. By using two cooperating NFSv4.0 clients, where one sets a lock with a large owner string and another requests a conflictin...

kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

A flaw was found in the Linux kernel's NFSv4.0 server nfsd. A remote, unauthenticated attacker can exploit this heap overflow vulnerability in the NFSv4.0 LOCK replay cache. By using two cooperating NFSv4.0 clients, where one sets a lock with a large owner string and another requests a conflictin...

EUVD-2026-27805

In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9906: Fix potential memory leak in tw9906probe In one of the error paths in tw9906probe, the memory allocated in v4l2ctrlhandlerinit and v4l2ctrlnewstd is not freed. Fix that by calling v4l2ctrlhandlerfree on the...

EUVD-2026-27774

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs in getsregs2 Add SRCU read-side protection when reading PDPTR registers in getsregs2. Reading PDPTRs may trigger access to guest memory: kvmpdptrread - svmcachereg - loadpdptrs -...

EUVD-2026-27779

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen2: Add sanity check for session stop In iriskillsession, inst-state is set to IRISINSTERROR and sessionclose is executed, which will kfreeinsthfigen2-packet. If stopstreaming is called afterward, it will cause a...