EU_compliance_MCP

EU Regulations MCP Server ⚰️ RETIRED — folded into ansvar-mcp-fleet 2026-07-07 This standalone repo is archived. The eu-regulations corpus now lives at Ansvar-Systems/ansvar-mcp-fleet under mcps/eu-regulations/ fold: fleet PR 594; cutover: deploy PR 653, live 2026-07-07. Production serves the...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Most of this code is based on @polygraphene's fork of the original. Heavy modifications were required because the main primer used select for most published variants of the exploit does not properly align with the rtmutexwaiter...

CVE-2026-66357

A flaw was found in the inets component of Erlang/OTP, specifically within its httpd server. This vulnerability arises from the httpd server's failure to correctly implement obs-fold obsolete line folding for HTTP header continuation lines, as defined in RFC 2616 and RFC 7230. This oversight allo...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.19.12 up to and including 5.20 and version 6.0. This vulnerability arises because the SMB client fails to properly handle off or oldeof parameters that are not page-aligned when processing insert/fold range operations. As a result,...

Linux Distros Unpatched Vulnerability : CVE-2026-66357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - httpd has never implemented obs-fold RFC 2616 2.2 / RFC 7230 3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a n...

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

...

CVE-2026-63385

A flaw was found in libevent. The evhttpdecodeuriinternal function in http.c decodes percent-encoded %00 bytes into literal NUL characters without rejecting them, allowing an attacker to craft a URI such as /admin/secret%00.jpg where extension-based access checks see .jpg but the server processes...

DEBIAN-CVE-2026-66357

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

AZL-98460 CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

CVE-2026-66357

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

UBUNTU-CVE-2026-66357

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

CVE-2026-66357

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

CVE-2026-66357 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

CVE-2026-66357

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

CVE-2026-66357

Erlang/OTP's inets httpd component has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines), meaning every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature enables HTTP request smuggling against servers built on this com...

CVE-2026-66357 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

CVE-2026-66357 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

EUVD-2026-69232

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

EEF-CVE-2026-66357 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

Summary httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This...

CVE-2026-66357

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...