cve-2022-21907

CVE-2022-21907 Applicazione Golang di 1vere$k CVE-2022-21907 - Double Free nel driver http.sys. Riepilogo Questa è un'applicazione Golang multithreading che consente di effettuare richieste su più target contemporaneamente. Non è molto produttiva con le richieste POST, ma fornisce quasi il 30% di...

CVE-2021-31166

CVE-2021-31166 Perché Recentemente ho scritto un exploit per CVE-2021-31166, sfrutta CVE-2021-31166 e CVE-2021-31166. Un pentester dovrebbe usare https://github.com/mauricelambert/CVE-2021-31166, ma nei team SOC abbiamo bisogno di conoscere la vulnerabilità specifica per correggerla adeguatamente...

CVE-2022-21907-http.sys

CVE-2022-21907 - Double Free nel driver http.sys CVE-2022-21907 - Double Free nel driver http.sys Sommario Un attaccante non autenticato può inviare una richiesta HTTP con un header di richiesta HTTP "Accept-Encoding" che innesca un double free nella lista di codifiche sconosciuta all'interno del...

CVE-2021-31166

CVE-2021-31166 Rilevamento dei tentativi di sfruttare la vulnerabilità CVE-2021-31166 vulnerabilità dello stack di protocolli HTTP Regola Suricata Pacchetto Zeek Riferimenti https://corelight.blog/2021/05/27/detecting-cve-2021-31166-http-vulnerability/...

cve-2022-21907-http.sys

cve-2022-21907-http.sys di 1vere$k CVE-2022-21907 - Doppio Free nel driver http.sys. Sommario Un attaccante non autenticato può inviare una richiesta HTTP con un'intestazione "Accept-Encoding" innescando un doppio free nell'elenco di codifica sconosciuto all'interno dello stack del protocollo HTT...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit für die RCE-Schwachstelle im MS-HTTP-Protokollstapel CVE-2021-31166 Eine speziell präparierte HTTP-Anfrage, die auf eine verwundbare Windows-Version abzielt, führt zu einem DoS-Angriff. Der Server wird mit einem Blue Screen neu gestartet. Http.sys ist ein...

Debian dla-4706 : ruby-rack - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4706 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected]...

Uncontrolled Resource Consumption (Denial Of Service)

io.netty, netty-codec-http is vulnerable to Uncontrolled Resource Consumption Denial of Service. The vulnerability is due to the HttpContentEncoder maintaining an unbounded acceptEncodingQueue that stores attacker-controlled data without any size limit, which allows an attacker to exploit HTTP/1....

Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

Impact HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controlled data without any size limit. The queue is filled on the I/O thread for every inbound HTTP request and drained...

MGASA-2026-0226 Updated ruby-rack packages fix security vulnerabilities

CVE-2026-26961 Greedy multipart boundary parsing can cause parser differentials and WAF bypass. Forwarded header semicolon injection enables Host and Scheme spoofing. CVE-2026-34230 Quadratic complexity in Rack::Utils.selectbestencoding via wildcard Accept-Encoding header. CVE-2026-34763 Root...

USN-8182-1: Rack vulnerabilities

Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could possibly use this issue to bypass network security filters. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.10. CVE-2026-26961 William T. Nelson...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Rack vulnerabilities (USN-8182-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8182-1 advisory. Andrew Lacambra discovered that Rack did not properly parse certain regular...

Linux Distros Unpatched Vulnerability : CVE-2026-34230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with...

SUSE CVE-2026-34230

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a respon...

CVE-2026-34230

A flaw was found in Rack. An unauthenticated attacker can exploit a vulnerability in the Rack::Utils.selectbestencoding method by sending a specially crafted Accept-Encoding header with numerous wildcard entries. This leads to quadratic time complexity during processing, causing disproportionate...

EUVD-2026-18378

Rack has quadratic complexity in Rack::Utils.selectbestencoding via wildcard Accept-Encoding header...

GHSA-V569-HP3G-36WR Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Summary Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a response encoding, an unauthenticated attacker can send a single request with a crafted...

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Summary Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a response encoding, an unauthenticated attacker can send a single request with a crafted...

CVE-2026-34230

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a respon...