43735 matches found
CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary and the Mint client on a pooled connection, poisoning the responses to subsequent requests that share the connection...
EEF-CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries
Summary Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary and the Mint client on a pooled connection, poisoning the responses to subsequent requests that share the...
CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
EUVD-2026-88218
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
CVE-2026-7171
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...
CVE-2026-7171 Stored Cross-Site Scripting (XSS) in TPVEnlanube
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...
CVE-2026-7171 Stored Cross-Site Scripting (XSS) in TPVEnlanube
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...
CVE-2026-7171
A Stored Cross-Site Scripting (XSS) vulnerability exists in TPVEnlanube due to insufficient input validation of the 'Apellido 1' parameter at the '/administrator/index.php?page=admin.user_add&user_id=45&option=com_virtuemart' endpoint. An authenticated attacker can inject and execute malicious co...
EUVD-2026-88201
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...
iBSSloader
iBSSloader Research and tooling to boot Linux on iPad mini 1 P105AP / iPad2,5, Apple A5 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads — without writing to the iOS install. This repo combines: Device tree port — Apple ADT → Linux DTS/DTB for P105AP Kernel build — ARMv7 zImage +...
librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...
CVE-2026-91043: Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
CVE-2026-7171: Improper Neutralization of Input During Web Page Generation
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...
PT-2026-102484
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.8 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the CSN.1 protocol dissector can lead to a denial of service. Recommendations Update Wireshark versions 4.6.0 through 4.6.8 to version 4.6.9...
CVE-2026-94194: Inconsistent Interpretation of HTTP Requests
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary and the Mint client on a pooled connection, poisoning the responses to subsequent requests that share the connection...
CLSA-2026-1790544295 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.1...
CLSA-2026-1790542520 TuxCare security update for undici (1 CVE)
TuxCare rebuilt undici to address 1 CVE. Fixed in 7.28.0-tuxcare.1...
CLSA-2026-1790542220 TuxCare security update for undici (12 CVEs)
TuxCare rebuilt undici to address 12 CVEs. Fixed in 6.19.7-tuxcare.1...