8632 matches found
CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...
CVE-2026-102556
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...
CVE-2026-39636-vulnerability-exp
1. ここで実行する前に必ずBurp Suiteを起動してください（！！） また、デフォルトのBurp Suiteポートは8080である必要があります。それ以外の場合は適宜変更可能です 2. 必要なライブラリをダウンロード pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. そのまま実行してください CVE-2026-39363 単一利用スクリプト ここにはドメイン名を入力する必要があります。例：www.baidu.com ポートは不要です CVE-2026-39363...
CVE-2026-39987-marimo-rce
CVE-2026-39987 - Marimo Pre-Auth RCE Marimo における認証なしリモートコード実行（WebSocket ターミナル経由） 📌 概要 CVE-2026-39987 は、Marimo のバージョン 0.23.0 未満に影響する深刻な Pre-Authentication Remote Code Execution （認証前リモートコード実行）の脆弱性です。/terminal/ws WebSocket エンドポイントは認証を完全にバイパスするため、認証されていない攻撃者が Marimo プロセスの権限（通常 Docker 環境では root...
CVE-2026-25253
CVE-2026-25253 OpenClaw RCE en 1 clic ★ CVE-2026-25253 PoC de OpenClaw RCE en 1 clic ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Descripción CVE-2026-25253 : Vulnerabilidad de Exfiltración del Token de Autenticación de OpenClaw descripción: OpenClaw también...
CVE-2026-39987-PoC
CVE-2026-39987 PoC 概述 Marimo = 0.20.4 受 /terminal/ws WebSocket 端点中一个预认证 RCE 漏洞的影响。 该端点会检查应用模式和终端支持情况，但在接受 WebSocket 连接之前不会验证身份认证 。随后它会创建一个 PTY shell，允许未认证的攻击者以 Marimo 进程的权限执行命令。 根本原因 与其他调用 validateauth 的 WebSocket 端点不同，易受攻击的终端端点直接接受连接： if appstate.mode != SessionMode.EDIT: await websocket.close...
fortios-auth-bypass-check-CVE-2024-55591
CVE-2024-55591 Fortinet FortiOS 認証バイパスの脆弱性動作検出 動作中の検出 python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \// || \ \ \ CVE-2024-55591.py Fortinet FortiOS Authentication Bypass...
CVE-2026-46726
CVE-2026-46726 — camel-vertx-websocket 标头注入（SSRF + 机密泄露） 针对同一 Apache Camel 漏洞的可运行概念验证（PoC）复现程序，每种运行时各一个： 运行时| 目录| 技术栈| WebSocket 数据源 ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| 独立端口 :8090 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Came...
CLEANSTART-2026-IF81553 undici's WebSocket client crashes the whole Node
Security vulnerability affects the langfuse package. undici's WebSocket client crashes the whole Node...
CLEANSTART-2026-WO79894 websocket-driver is a WebSocket protocol handler with pluggable I/O
Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...
Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-3144)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3144 advisory. The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocke...
Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2026-3123)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3123 advisory. undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connecti...
Linux Distros Unpatched Vulnerability : CVE-2026-102556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even...
Linux Distros Unpatched Vulnerability : CVE-2026-102557
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the...
Linux Distros Unpatched Vulnerability : CVE-2026-102559
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation AP...
Linux Distros Unpatched Vulnerability : CVE-2026-102560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for...
SUSE CVE-2026-67411
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol frontend could lose the proxy-derived client address before the MQTT authentication path checked loopbackusers, causing th...
CVE-2026-71300
CVE-2026-71300 — camel-atmosphere-websocket 调度头注入 针对 Apache Camel 漏洞的可运行概念验证复现程序，其中 camel-atmosphere-websocket producer 从名称位于 Camel 命名空间之外 的 websocket. Exchange 头中选择其 WebSocket 收件人 — 因此 HTTP HeaderFilterStrategy（只剥离 Camel / camel）会放行这些头，外部发送者便能够接管 producer 的调度决策。 Runtime| Directory| Stack...
CVE-2026-78329
CVE-2026-78329 — camel-undertow 标头过滤策略未应用（websocket. 注入） 针对 Apache Camel 漏洞的可运行概念验证复现程序，该漏洞中 UndertowEndpoint 将 headerFilterStrategy 默认为基础 HttpHeaderFilterStrategy，并将该实例推入其创建的 UndertowHttpBinding 中，覆盖 了 DefaultUndertowHttpBinding 安装的 UndertowHeaderFilterStrategy。除非 部署提供了自定义绑定或显式的...
