USN-8972-1: HAProxy vulnerabilities

It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110353) It was discovered that HAProxy incorrectly handled certain HTTP/1.1 chunked requests. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, l…

آسیب‌پذیری و روز صفر سخت‌افزار و تراشه
خواندن متن کامل در Ubuntu Security Notices درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

UK organisations warned to brace for AI-powered ransomware attacks

AI-powered malware is “highly likely” to be used in ransomware attacks on Britain’s critical national infrastructure within the next two years. The head of GCHQ’s National Cyber Security Centre, Dr. Richard Horne, warned that abuse of AI technologies is making it much easier for attackers to rapidly expose and exploit long-neglected security weaknesses. Dr. Horne argued that underinvestment in technology and security…

AWS Security Bulletins

CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

Bulletin ID: 2026-165-AWS Publication Date: 11/03/2026 10:00 AM PST Description: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 allows remote authenticated users to elevate their privileges. We recommend you upgrade to Babelfish for PostgreSQL extension versions Please refer to the article below for the most up-to-date and complete information…

شهر سخت‌افزار

کشف بزرگ‌ترین کارت گرافیک PCIe جهان؛ نمونه اولیه عجیب AMD با ۴ پردازنده گرافیکی

علاقه‌مندان به سیستم‌های کوچک Mini-ITX بهتر است چشمان خود را ببندند! به‌تازگی تصاویری از یک مدار چاپی (PCB) غول‌پیکر و عجیب فاش شده است که نشان می‌دهد AMD روی یک کارت گرافیک با چهار GPU و ۳۲ گیگابایت حافظه کار می‌کرده است.

Cisco Security Advisories

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL st…