Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...
Multiple vulnerabilities in Go Networking have been identified, impacting Ubuntu 22.04 LTS. These vulnerabilities include denial of service risks due to server hangs during shutdown (CVE-2022-27664), excessive CPU usage from malicious streams (CVE-2022-41723), and improper sanitization of text nodes...
Recent updates have addressed critical vulnerabilities in Go Networking affecting multiple Ubuntu versions, including 20.04 LTS, 18.04 LTS, and 16.04 LTS. The vulnerabilities, identified as CVE-2022-27664 and CVE-2022-41723, could lead to denial of service attacks, with potential for servers to hang...
The go-sendxmpp update to version 0.15.1 addresses critical memory issues, including CVE-2025-47911, which involves algorithms with quadratic complexity when parsing HTML documents. Additionally, it resolves CVE-2025-58190 related to excessive memory consumption by 'html.ParseFragment'. Users of ope...
