CVE-2024-38828

Sicherheitslücke CVE-2024-38828 Beschreibung Der Test prüft das Verhalten/die Reaktion im Spring Framework mit und ohne die Sicherheitslücke CVE-2024-38828. In ByteArrayHttpMessageConverter wird Speicher im ByteArrayOutputStream basierend auf dem Anfrageheader Content-Length alloziert, was...

CVE-2026-38427

CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...

SAPGateBreaker-Exploit

CVE-2022-22536: HTTP-Schmuggel durch SAPs Haupteingang SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 und SAP Web Dispatcher sind anfällig für Request-Smuggling und Request-Verkettung. Ein nicht authentifizierter Angreifer kann...

CVE-2022-45059-demo

CVE-2022-45059-demo As versões 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 e 7.2.0 do Varnish Cache possuem uma vulnerabilidade de contrabando de requisições onde um atacante pode solicitar que o cabeçalho content-length seja tratado como hop-by-hop. Esta é uma demonstração composta por uma aplicaçã...

CVE-2019-19945_Test

CVE-2019-19945Test Questo è il codice per il primo CVE proposto 1. Installare Docker 2. Costruire ed eseguire il server cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. Ottenere l'IP del container del server Linux sudo docker container inspect server | gre...

CLZero

CLZero Un progetto per il fuzzing dei vettori di attacco di Request Smuggling HTTP/1.1 CL.0. Informazioni Grazie a @albinowax, @defparam e @d3d, altrimenti questo strumento non esisterebbe. Ispirato dallo strumento Smuggler, tutti i gadget di attacco sono stati adattati da Smuggler e da...

citrixmash_scanner

CVE-2019-19781 citrixmash Scanner Ein multithreaded Scanner für Citrix-Geräte, die anfällig für CVE-2019-19781 sind. Der Scanner versucht nicht, Hosts zu kompromittieren/auszunutzen und vermeidet das Herunterladen sensibler Inhalte. Ein HEAD-Request wird verwendet, um festzustellen, ob ein Ziel...

w48crash

WebMod Stack-Pufferüberlauf CVE-2007-1260 von cybermind Kevin Masterson [email protected] WebMod-Seite archiviert: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php Verwundbare Versionen: 0.48, sowohl Win32 als auch Linux. Frühere Versionen könnten verwundbar sein. Dies sollt...

CVE-2026-73257 Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling

Mongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthenticated attacker can send an HTTP request containing both Content-Length and Transfer-Encoding: chunked. The clcount and tecount checks in the mghttpparse and httpcb paths in src/http.c accept both...

USN-8650-1: Cap'n Proto vulnerabilities

Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inconsistently, resulting in HTTP request ...

USN-8650-1 capnproto vulnerabilities

Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inconsistently, resulting in HTTP request ...

Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2026-2060)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2060 advisory. brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attack...

BIT-NODE-MIN-2026-58044

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

BIT-NODE-2026-58044

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

UBUNTU-CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

EUVD-2026-58619

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

CVE-2026-73051

CVE-2026-73051 affects actix-http before 3.12.1. The HTTP/1.1 parser accepts requests with both Content-Length and Transfer-Encoding: chunked headers, enabling HTTP request smuggling. Unauthenticated remote attackers could use a front-end intermediary to desynchronize backend requests and smuggle...

JLSEC-2026-1269

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in...