Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-server (UTSA-2026-130063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130063 advisory. RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130138 advisory. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...

Linux Distros Unpatched Vulnerability : CVE-2026-107718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter...

PT-2026-114150

FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http response recv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...

PT-2026-114149

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token Cookie: msts= is not rejected and is written by http proxy connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a...

Quarkus Java Framework Data Compromise

The vulnerability of the Quarkus framework is related to incorrect interpretation of HTTP requests. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

mpfddecode function in the Data Compromise

The vulnerability of the mpfddecode function in the bootloaderregion.bin file of the Emergency HTTP Recovery Server component of the D-Link DCS-930L Wi-Fi camera software is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-95101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an...

RHEL 10 : libsoup3 (RHSA-2026:82728)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82728 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the...

Debian dsa-6558 : curl - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6558 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6558-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-92392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During an upload, curl mishandles HTTP/2 RSTSTREAM received from the server with reason HTTP11REQUIRED or REFUSEDSTREAM leading to a use after free of a struct...

nginx -- multiple vulnerabilities

The nginx developers report: A buffer overflow might occur in a worker process when using the "alias" directive if the request URI was changed by the "rewrite" directive and was then mapped to a file path CVE-2026-15176. A buffer overflow might occur in a worker process while evaluating string...

vuln-CVE-2022-41082

vuln-CVE-2022-41082 https & http FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

CVE-2021-38647-POC-and-Demo-environment

Details OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, formerly known as NanoWBEM is an open source Common Interface Model CMI management server by Microsoft and The Open Group. OMI is a software agent found on most of Azure's Linux VMs, yet many do not know of it's presence. On...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

GHSA-MF4X-W4GH-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unauthenticated...

PyFlooder

PyFlooder An HTTP Flood Python script that could stop a normal website in 10s How does it work ? It generates a configurable number of random GET requests and sends them to the target Usage pyflooder.py...

GHSA-WXXW-5CVC-53J7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. SocketsHttpHandler can retain a...

GHSA-RV87-CCXW-8GGF Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An aborted Kestrel...

GHSA-FPQ8-4VHR-RCXX Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Kestrel accepts newli...