500 matches found
perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file()
A flaw was found in HTTP::Daemon, a Perl module used for creating HTTP servers. A remote attacker can exploit this vulnerability by providing specially crafted input to the sendfile function, leading to OS command injection. This allows the attacker to execute arbitrary commands on the system wit...
Important: Red Hat Security Advisory: perl-HTTP-Daemon security update
An update for perl-HTTP-Daemon is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file()
A flaw was found in HTTP::Daemon, a Perl module used for creating HTTP servers. A remote attacker can exploit this vulnerability by providing specially crafted input to the sendfile function, leading to OS command injection. This allows the attacker to execute arbitrary commands on the system wit...
Important: Red Hat Security Advisory: perl-HTTP-Daemon security update
An update for perl-HTTP-Daemon is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 9 : perl-HTTP-Daemon (RHSA-2026:93586)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93586 advisory. The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers...
RHEL 10 : perl-HTTP-Daemon (RHSA-2026:93585)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93585 advisory. The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 server...
CVE-2024-28995
SolarWinds Serv-U Directory Traversal Vulnerability POC cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analysis https://t.co/JPCd6Y4v1g Shodan Querys product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...
Rocky Linux 8 [CIQ] Security Update: perl-HTTP-Daemon (crlsa-2026_36188)
The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202636188 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description block...
Rocky Linux 9 [CIQ] Security Update: perl-HTTP-Daemon (crlsa-2026_36187)
The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202636187 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description block...
Rocky Linux 10.2 [CIQ] Security Update: perl-HTTP-Daemon (crlsa-2026_36189)
The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202636189 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description bloc...
ROS-20260921-73-0105
The vulnerability in perl-HTTP-Daemon is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...
Astra Linux – Vulnerability in libhttp-daemon-perl
Versions of HTTP::Daemon prior to version 6.17 for Perl allow for OS command injection through the sendfile function. The sendfile function opens its string argument using Perl’s two-argument open syntax. This two-argument syntax interprets certain magic prefixes: '| cmd' and 'cmd |' open a pipe ...
HTTP-Daemon: Improper header handling
Background HTTP-Daemon provides a base class for simple HTTP servers. Description Inconsistent Interpretation of HTTP Requests. Impact The bug could potentially be exploited to gain privileged access to APIs or poison intermediate caches. Workaround There is no known workaround at this time...
GLSA-202608-10 : HTTP-Daemon: Improper header handling
The remote host is affected by the vulnerability described in GLSA-202608-10 HTTP-Daemon: Improper header handling Inconsistent Interpretation of HTTP Requests. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not tested...
CVE-2026-9030
CVE-2026-9030 affects the httpd service on TP-Link Archer A6 v4. The vulnerability lies in the asynchronous systool handling path in httpd, which does not properly synchronize or safely manage concurrent systool operations. Exploitation via crafted systool instructions sent through the asynchrono...
MiracleLinux 9 : perl-HTTP-Daemon-6.12-6.el9_8.1 (AXSA:2026-1466:02)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1466:02 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
CVE-2026-8450 affecting package perl-HTTP-Daemon for versions less than 6.16-2
CVE-2026-8450 affecting package perl-HTTP-Daemon for versions less than 6.16-2. A patched version of the package is available...
AlmaLinux 10 : perl-HTTP-Daemon (ALSA-2026:36189)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:36189 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description block...
