cakephp-cookie-suffix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-cookie-suffix Write-up: https://abraxaslabs.tech/research/cakephp-cookie-suffix cakephp-cookie-suffix Class: Cookie leak / plant Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation...

slinger

!Contributorscontributors-shieldcontributors-url !Forksforks-shieldforks-url !Stargazersstars-shieldstars-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url !crates iocrates-shieldcrates-url slinger投石器 An HTTP Client for Rust designed for hackers. Explore the docs » View Dem...

cli

HTTPie CLI: human-friendly HTTP client for the API era HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs & HTTP...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

square__retrofit_CVE-2018-1000850_2-4-0

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: implementation 'com.squareup.retrofit2:retrofit:2.4.0' Snapshots of the development...

RustTLSX

RustTLSX 🦀 . An advanced stealth HTTP client for Rust. Built for privacy-conscious developers who need complete control over their network fingerprint. Looks like a browser. Acts like a browser. Written in Rust. Credits & Foundation Built onbogdanfinn/tls-client - the industry-leading TLS...

Retrofit-1

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: implementation 'com.squareup.retrofit2:retrofit:2.4.0' Snapshots of the development...

async-http-client-check

async-http-client-check Offline checker for the 26 repository-level security advisories oforg.asynchttpclient:async-http-client AsyncHttpClient, "AHC". It tells you which ones your jar is actually exposed to, flags the ones Dependabot and OSV cannot see , and gives one answer per line: 3.x →3.0.1...

Important: nodejs24

Issue Overview: Node js security advisory: Permission Model filesystem over-grant via wildcard radix lookup CVE-2026-106071 undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when an Agent composes the redirect and shared cache interceptors, a cached...

burner-net

BurnerNet Zero-trust, anti-forensic HTTP client. Wipes secrets. Severs traces. CPR in a Stealth Tank. 👻 BurnerNet is a C++20 anti-forensic HTTP client. It provides a fluent, CPR-like API for apps that cannot fully trust the local machine—physically wiping secrets from RAM and severing execution...

CVE-2019-17638-Jetty

JETTY The Jetty project is a 100% Java HTTP Server, HTTP Client and Servlet Container from the eclipse foundation http://www.eclipse.org/jetty/ Jetty is open source and is dual licensed using the Apache 2.0 and Eclipse Public License 1.0. You may choose either license when distributing Jetty...

nodejs: Node.js: Request smuggling via HTTP client header truncation

A flaw was found in Node.js. The Node.js HTTP client can cause a request desynchronization in forwarding proxies, potentially leading to request smuggling. This vulnerability arises when the HTTP client omits certain headers, such as Content-Length, from being visible to the proxy application whi...

nodejs: Node.js: Request smuggling via HTTP client header truncation

A flaw was found in Node.js. The Node.js HTTP client can cause a request desynchronization in forwarding proxies, potentially leading to request smuggling. This vulnerability arises when the HTTP client omits certain headers, such as Content-Length, from being visible to the proxy application whi...

CLSA-2026-1794321043 TuxCare security update for symfony/http-client (2 CVEs)

TuxCare rebuilt symfony/http-client to address 2 CVEs. Fixed in v6.0.20-p2+tuxcare...

CVE-2026-90588

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...

CVE-2026-90588 Out-of-bounds read in Zephyr HTTP client debug logging of response header fields

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...

CVE-2026-90588 Out-of-bounds read in Zephyr HTTP client debug logging of response header fields

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...

CVE-2026-90588

The Zephyr HTTP client contains an out-of-bounds read vulnerability in the debug helper print_header_field() located in subsys/net/lib/http/http_client.c. The root cause is the use of a %s conversion within snprintk(), which measures the source length using strlen() on non-NUL-terminated data pro...

EUVD-2026-120489

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...

PT-2026-141164

The HTTP client's debug helper print header field in subsys/net/lib/http/http client.c formatted an http parser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are...