106 matches found
Http11Probe
Http11Probe Http11ProbeはHTTP/1.1サーバー向けのコンプライアンスおよびセキュリティテスターです。生のTCPソケットを介して、不正な形式、あいまい、または巨大なリクエストをサーバーに送信し、RFC 9110およびRFC 9112が実際に要求する応答をチェックします。これらは、厳格なパーサーと緩和なパーサーが一致しなくなる厄介なケースです。例えば、単純なLF行末、廃止された行折り返し、CL/TEリクエストスマグリング、チャンクフレーミングのトリック、巨大なヘッダー、NULバイトなどがあります。...
CVE-2026-6790
In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...
CVE-2026-9110 vulnerabilities
Vulnerabilities for packages: chromium...
SUSE CVE-2026-9110
Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-9110
Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-9110
Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Critical...
Google Chrome < 148.0.7778.178 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 148.0.7778.178. It is, therefore, affected by multiple vulnerabilities as referenced in the 202605stable-channel-update-for-desktop0841193308 advisory. - Use after free in DOM in Google Chrome on prior to 148.0.7778.179...
Samsung多款产品 安全漏洞
Samsung Mobile Processors are products of the South Korean company Samsung. Samsung Mobile Processors are a series of mobile processors. Samsung Wearable Processors are a series of wearable processors. Samsung Modem Exynos is a series of modem chips. Several Samsung products have security...
CVE-2026-3419 Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation
Fastify incorrectly accepts malformed Content-Type headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1https://httpwg.org/specs/rfc9110.htmlfield.content-type. For example, a request sent with Content-Type: application/json garbage passes validation and ...
Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation
Description Fastify incorrectly accepts malformed Content-Type headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1. For example, a request sent with Content-Type: application/json garbage passes validation and is processed normally, rather than being...
Qnap QTS and QuTS hero Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2025-9110)
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the followin...
CVE-2025-9110
creationtimestamp| type| source ---|---|--- 2026-01-06 14:00:18+00:00| seen| Telegram/Dids5wkv2WnegEQ541iSaF6odb5Z2U2AvEwoBgRJJ9sDo...
CVE-2025-27807
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS...
SAMSUNG多款产品 安全漏洞
SAMSUNG Wearable Processor and others are products of the South Korean company Samsung.SAMSUNG Wearable Processor is a series of wearable processors.SAMSUNG Exynos 990 is a mobile processor.SAMSUNG Exynos 850 is a mobile processor. SAMSUNG Exynos 850 is a mobile processor. A security vulnerabilit...
PT-2026-1321
Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980 Samsung Mobile Processor, Wearable Processor, and Modem Exynos 990 Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850 Samsung Mobile Processor, Wearable...
CVE-2025-9110
CVE-2025-9110 affects QNAP QTS and QuTS hero where an exposure of sensitive system information to an unauthorized control sphere allows remote reading of application data. Affected versions include QTS 5.2.8.3332 build 20251128 and later, QuTS hero h5.2.8.3321 build 20251117 and later, and QuTS h...
ECHO-E341-9110-DE85
Bulletin has no description...
SAMSUNG多款产品 安全漏洞
SAMSUNG Exynos is a range of processors from South Korean company Samsung SAMSUNG. A security vulnerability exists in a number of SAMSUNG products, which stems from mishandling of 5G NRMM packets and could lead to a denial of service. The following products are affected: Exynos 2100, 1280, 2200,...
