Tag
VMware Tanzu Platform and Associated Components: Multiple Vulnerabilities
Multiple vulnerabilities discovered in various VMware Tanzu Platform components, including API Gateway, Tanzu Hub, and associated buildpacks, require urgent review of Broadcom security advisories for remediation.
Heap-based Buffer Overflow in Juniper Junos OS SVR Component
6 TTPs 1 CVEAn unauthenticated heap-based buffer overflow in the Secure Vector Routing (SVR) component of Juniper Junos OS allows remote attackers to trigger denial-of-service or potentially execute arbitrary code via malformed IPv4 packets.
MIT Kerberos Denial of Service Vulnerabilities
1 TTPMIT Kerberos contains multiple vulnerabilities that enable a remote, authenticated attacker to trigger a Denial of Service condition on targeted systems.
Denial of Service Vulnerability in rpcbind
1 TTP 1 CVECVE-2026-94640 allows a remote, unauthenticated attacker to trigger a denial of service in the rpcbind service through the submission of a flood of unique RPC requests that exhaust system memory.
Detecting Anomalous Cisco IOS XE Programmatic WebUI Configuration Changes
2 TTPsDetection of programmatic configuration modifications on Cisco IOS XE devices via the WebUI WSMA process associated with the Salt Typhoon campaign.
BIND 9 Denial of Service via Malformed DNS64 Response
1 TTP 1 CVEA vulnerability in BIND 9 resolvers configured with DNS64 allows an authoritative server to cause a process crash through malformed responses, resulting in a denial of service.
Denial of Service Vulnerability in BIND Named Service
1 TTP 6 CVEsA memory management flaw in BIND 9 allows an attacker-controlled authoritative DNS server to trigger a service abort by providing a maliciously crafted 65536-byte negative DNS response.
Kernel Denial of Service Vulnerability in vmxnet3 Driver
1 CVECVE-2026-68299 is a kernel-level denial of service vulnerability in the vmxnet3 virtual network driver caused by a BUG_ON condition when processing malformed Geneve-encapsulated packets.
Multiple Denial of Service Vulnerabilities in PJSIP pjmedia
1 TTPMultiple vulnerabilities in the PJSIP pjmedia library can be exploited by a remote, unauthenticated attacker to trigger a denial of service condition, potentially disrupting telecommunications services.
CVE-2026-7473: Arista EOS Incomplete Comparison Vulnerability Leading to Incorrect Packet Forwarding
2 rules 3 TTPs 3 CVEsArista Extensible Operating System (EOS) contains CVE-2026-7473, an incomplete comparison vulnerability that allows a switch to incorrectly decapsulate and forward unexpected tunneled packets if their destination IP matches the switch's configured decapsulation IP, potentially leading to unauthorized network access or bypass of security controls.
GlassWorm V2 Infrastructure Rotation and GitHub Injection Analysis
2 rules 2 TTPsAnalysis of GlassWorm V2 reveals infrastructure rotation and GitHub injection techniques.
ESXi Download Error Detection
2 rules 2 TTPsDetection of failed file download attempts on ESXi hosts, potentially indicating unauthorized or malicious activity such as installing or updating components, including VIBs or scripts.