CVE-2026-19401

NSD (Name Server Daemon) is vulnerable to a remote UDP denial-of-service targeting its serve child process. An unauthenticated remote attacker can crash the serve child by sending a crafted UDP message containing a specially tuned number of DNS Cookie options (17 when the UDP payload size is 512)...

DroneCamera

DroneCamera Um aplicativo Android para visualizar o fluxo de vídeo ao vivo de drones HASAKEE FPV. Construído por engenharia reversa do protocolo UDP proprietário usado pela câmera WiFi do drone. Drone Suportado Drone HASAKEE FPV SSID WiFi: HASAKEE-WiFi-XXXXX Câmera VGA usando o protocolo UDP 0x63...

PT-2026-82355

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 -...

CTF-Web-Exploitation

Desync del Portale Nether HUUP "Non viaggio su strade consolidate, ma salto liberamente attraverso il vuoto. Se mi impacchetti male, consegnerò un segreto alla porta sbagliata." Descrizione La sfida presenta un'applicazione HTTP/3 QUIC stratificata su UDP. Poiché UDP è senza stato e il proxy non...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

EUVD-2026-65310

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability caused by an incomplete fix for CVE-2024-41726. An attacker who can log in to a Windows system with the affected product installed may execute arbitrary code on another Windows system that also has the product install...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

EUVD-2026-65309

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability resulting from an incomplete fix for CVE-2024-41726 . An attacker who can log in to a Windows system with the affected product installed may be able to execute arbitrary code on another Windows system that has the pro...

EUVD-2026-65307

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability affects SKYSEA Client View and SKYMEC IT Manager , two Windows-based IT management products. An authenticated attacker who can log in to a Windows system running the affected software may be able to execute arbitrary code on a different Windows host tha...

CVE-2026-71914

Multiple DrayTek VigorAP models contain a command injection vulnerability in the drayapm component. The vulnerability is caused by insufficient validation of UDP message content after STARTSPEEDTEST before command execution. A remote attacker can trigger this vulnerability via a crafted message t...

EUVD-2026-64973

Multiple DrayTek VigorAP models contain a command injection vulnerability in the drayapm component. The vulnerability is caused by insufficient validation of UDP message content after STARTSPEEDTEST before command execution. A remote attacker can trigger this vulnerability via a crafted message t...

CVE-2026-71914 DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm

Multiple DrayTek VigorAP models contain a command injection vulnerability in the drayapm component. The vulnerability is caused by insufficient validation of UDP message content after STARTSPEEDTEST before command execution. A remote attacker can trigger this vulnerability via a crafted message t...

CVE-2026-71914

Multiple DrayTek VigorAP models are affected by a pre-authentication OS command injection in the dray_apm component. The root cause is insufficient validation of UDP message content following the START_SPEED_TEST event before command execution, allowing a remote unauthenticated attacker to send a...

CVE-2026-74705

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: skbuff: Account for tail adjustment during pull operations Extending the tail of a data structure may have some unexpected side effects if a program uses a helper function like BPFFUNCskbpulldata to read partial content beyond th...