cve-2022-21907-http.sys

cve-2022-21907-http.sys от 1vere$k CVE-2022-21907 - Двойное освобождение в драйвере http.sys. Краткое описание Неаутентифицированный злоумышленник может отправить HTTP-запрос с заголовком "Accept-Encoding", вызывая двойное освобождение в неизвестном списке кодирования внутри стека протокола HTTP...

cve-2022-21907

CVE-2022-21907 Приложение на Golang от 1vere$k CVE-2022-21907 - Двойное освобождение в драйвере http.sys. Краткое описание Это многопоточное приложение на Golang, которое позволяет отправлять запросы на несколько целей одновременно. Не очень производительно с POST-запросами, но обеспечивает почти...

CVE-2021-31166

CVE-2021-31166 Зачем Недавно я написал эксплойт для CVE-2021-31166, он эксплуатирует CVE-2021-31166 и CVE-2021-31166. Пентестеру следует использовать https://github.com/mauricelambert/CVE-2021-31166, но командам SOC нужно знать конкретную уязвимость, чтобы правильно её устранить, именно поэтому я...

CVE-2021-31166

CVE-2021-31166 Обнаружение попыток эксплуатации CVE-2021-31166 уязвимость стека протокола HTTP Правило Suricata Пакет Zeek Ссылки https://corelight.blog/2021/05/27/detecting-cve-2021-31166-http-vulnerability/ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166...

CVE-2022-21907-http.sys

CVE-2022-21907 - Двойное освобождение в драйвере http.sys CVE-2022-21907 - Двойное освобождение в драйвере http.sys Краткое описание Неаутентифицированный злоумышленник может отправить HTTP-запрос с заголовком "Accept-Encoding", что вызывает двойное освобождение в неизвестном списке кодировок...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Эксплойт для RCE-уязвимости стека протокола HTTP от Microsoft CVE-2021-31166 Специально сформированный HTTP-запрос, направленный на уязвимую версию Windows, приводит к DoS-атаке, и сервер перезагрузится с ошибкой синего экрана. http.sys — это драйвер ядра Windows, отвечающи...

Debian dla-4706 : ruby-rack - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4706 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected]...

Uncontrolled Resource Consumption (Denial Of Service)

io.netty, netty-codec-http is vulnerable to Uncontrolled Resource Consumption Denial of Service. The vulnerability is due to the HttpContentEncoder maintaining an unbounded acceptEncodingQueue that stores attacker-controlled data without any size limit, which allows an attacker to exploit HTTP/1....

Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

Impact HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controlled data without any size limit. The queue is filled on the I/O thread for every inbound HTTP request and drained...

MGASA-2026-0226 Updated ruby-rack packages fix security vulnerabilities

CVE-2026-26961 Greedy multipart boundary parsing can cause parser differentials and WAF bypass. Forwarded header semicolon injection enables Host and Scheme spoofing. CVE-2026-34230 Quadratic complexity in Rack::Utils.selectbestencoding via wildcard Accept-Encoding header. CVE-2026-34763 Root...

USN-8182-1: Rack vulnerabilities

Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could possibly use this issue to bypass network security filters. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.10. CVE-2026-26961 William T. Nelson...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Rack vulnerabilities (USN-8182-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8182-1 advisory. Andrew Lacambra discovered that Rack did not properly parse certain regular...

Linux Distros Unpatched Vulnerability : CVE-2026-34230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with...

SUSE CVE-2026-34230

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a respon...

CVE-2026-34230

A flaw was found in Rack. An unauthenticated attacker can exploit a vulnerability in the Rack::Utils.selectbestencoding method by sending a specially crafted Accept-Encoding header with numerous wildcard entries. This leads to quadratic time complexity during processing, causing disproportionate...

EUVD-2026-18378

Rack has quadratic complexity in Rack::Utils.selectbestencoding via wildcard Accept-Encoding header...

GHSA-V569-HP3G-36WR Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Summary Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a response encoding, an unauthenticated attacker can send a single request with a crafted...

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Summary Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a response encoding, an unauthenticated attacker can send a single request with a crafted...

CVE-2026-34230

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a respon...