CVE-2026-102557

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...

EUVD-2026-89031

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-102556

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-102556

A heap buffer overflow vulnerability exists in libsoup due to a signal type confusion during the handling of incoming WebSocket Pong frames. Specifically, SoupWebsocketConnection emits the ::pong signal with a GByteArray pointer despite being declared to pass a GBytes object. Applications that co...

CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-102556

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-39636-vulnerability-exp

1. ここで実行する前に必ずBurp Suiteを起動してください（！！） また、デフォルトのBurp Suiteポートは8080である必要があります。それ以外の場合は適宜変更可能です 2. 必要なライブラリをダウンロード pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. そのまま実行してください CVE-2026-39363 単一利用スクリプト ここにはドメイン名を入力する必要があります。例：www.baidu.com ポートは不要です CVE-2026-39363...

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo 预认证远程代码执行 在 Marimo 中通过 WebSocket 终端实现未认证远程代码执行 📌 概述 CVE-2026-39987 是一个影响 Marimo 0.23.0 之前版本的严重预认证远程代码执行 漏洞。/terminal/ws WebSocket 端点完全绕过认证，允许任何未认证的攻击者以 Marimo 进程的权限（在 Docker 环境中通常为 root ）获取完整的交互式 PTY shell。 🛠️ 漏洞详情 CVE ID : CVE-2026-39987 受影响产品 : Marimo（响应式 Python 笔记本） 受影响版...

CVE-2026-25253

CVE-2026-25253 OpenClaw 一键RCE ★ CVE-2026-25253 OpenClaw 一键远程代码执行 PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e 描述 CVE-2026-25253：OpenClaw 认证令牌泄露漏洞 OpenClaw（又称 clawdbot 或 Moltbot）在 v2026.1.29 之前，攻击者可通过向 Control UI 提供精心构造的 gatewayUrl...

CVE-2026-39987-PoC

CVE-2026-39987 PoC 概述 Marimo = 0.20.4 受 /terminal/ws WebSocket 端点中一个预认证 RCE 漏洞的影响。 该端点会检查应用模式和终端支持情况，但在接受 WebSocket 连接之前不会验证身份认证 。随后它会创建一个 PTY shell，允许未认证的攻击者以 Marimo 进程的权限执行命令。 根本原因 与其他调用 validateauth 的 WebSocket 端点不同，易受攻击的终端端点直接接受连接： if appstate.mode != SessionMode.EDIT: await websocket.close...

fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 Fortinet FortiOS 認証バイパスの脆弱性動作検出 動作中の検出 python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \// || \ \ \ CVE-2024-55591.py Fortinet FortiOS Authentication Bypass...

CVE-2026-46726

CVE-2026-46726 — camel-vertx-websocket 标头注入（SSRF + 机密泄露） 针对同一 Apache Camel 漏洞的可运行概念验证（PoC）复现程序，每种运行时各一个： 运行时| 目录| 技术栈| WebSocket 数据源 ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| 独立端口 :8090 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Came...

CLEANSTART-2026-IF81553 undici's WebSocket client crashes the whole Node

Security vulnerability affects the langfuse package. undici's WebSocket client crashes the whole Node...

CLEANSTART-2026-WO79894 websocket-driver is a WebSocket protocol handler with pluggable I/O

Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-3144)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3144 advisory. The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocke...

Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2026-3123)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3123 advisory. undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connecti...

Linux Distros Unpatched Vulnerability : CVE-2026-102556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even...

Linux Distros Unpatched Vulnerability : CVE-2026-102557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the...

Linux Distros Unpatched Vulnerability : CVE-2026-102560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for...