540 matches found
vbulletin-exploits
vbulletin-exploits Exploits targeting vBulletin. CVE-2023-25135: Pre-authentication RCE See: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable ./vbulletin-rce-cve-2023-25135.py --help Usage: vbulletin-rce-cve-2023-25135.py -h -p PROXY url command Exploit for CVE-2023-25135:...
SUSE CVE-2026-98586
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
Linux Distros Unpatched Vulnerability : CVE-2026-98586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The...
CVE-2026-98586
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
UBUNTU-CVE-2026-98586
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
AZL-108647 CVE-2026-98586 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
CVE-2026-98586
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
CVE-2026-98586 sctp: hold asoc or transport before mod_timer() in timer handlers
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
CVE-2026-98586 sctp: hold asoc or transport before mod_timer() in timer handlers
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
EUVD-2026-103631
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...
CVE-2026-98586
A vulnerability exists in the Linux kernel SCTP implementation where the code calls mod_timer() before acquiring the necessary reference for a rearmed timer without holding the sock lock . This creates a race condition during timer cleanup: if a timer is deleted after mod_timer() returns but befo...
PT-2026-116805
In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before mod timer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls mod timer before taking the reference needed by th...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ipvs: fixed the NULL pointer dereference in the route error path of ipv4 null-ptr-deref. The IPv4 code path in ipvsgetoutrt calls dstlinkfailure, without ensuring that skb-dev is set. This leads to a NULL pointer dereference in...
ReactPHP react/http DoS
The vulnerability of the handleData function in the ReactPHP library’s react/http package, which handles streaming HTTP messages, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
BIT-THRIFT-2026-85476 Apache Thrift: c_glib `read_all` spins when the underlying read returns 0
Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
Golang X Text Package Heap Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ROS-20261009-73-0022
The vulnerability of the tcmlooptargetreset function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
golang.org/x/net Network Failure
The vulnerability in the golang.org/x/net network library for the Golang programming language involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...