Ubuntu Security Notices سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۸:۰۳

USN-8972-1: HAProxy vulnerabilities

It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110353) It was discovered that HAProxy incorrectly handled certain HTTP/1.1 chunked requests. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, l…

Vulnerabilities & Zero-Day Hardware & Chips

Read the full article at Ubuntu Security Notices Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Cisco Security Advisories سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۳۵

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL st…

Vulnerabilities & Zero-Day Databases Operating Systems

Source

شهر سخت‌افزار سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۹:۳۰

گاف یا افشای اطلاعات؟ مایکروسافت نام پردازنده‌های نسل آینده اینتل و AMD را فاش کرد

مایکروسافت در ارائه نقشه راه هوش مصنوعی ویندوز، از Ryzen AI ۵۰۰، Core Ultra Series ۴ و Snapdragon Next رونمایی کرد! برنامه مایکروسافت برای آینده AI PC، کامپیوترها را بر اساس توانای اجرای محلی مدل‌های هوش مصنوعی به چهار سطح مختلف تقسیم می‌کند.

AI Security AI & Machine Learning Hardware & Chips

Source

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۹:۲۹

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a command injection vulnerability, have been assigned the CVE identifiers CVE-2026-116606 (CVSS score: 9.3)

Vulnerabilities & Zero-Day Identity & Access Security

Source

CERT/CC Vulnerability Notes سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۹:۱۲

VU#124705: BaseChat – Audio Dating App, Android version 9.8.1, contains multiple vulnerabilities

Overview Multiple vulnerabilities have been identified in the Android application, BaseChat – Audio Dating App, version 9.8.1, which ultimately compromise the privacy of users’ personal data and activity. Description BaseChat is an online dating platform built in Flutter and targeted toward users over 18. It facilitates anonymous, voice-first interaction between users. Three distinct vulnerabilities have been identif…

Vulnerabilities & Zero-Day Web Development Mobile Development

Source