CVE-2026-90819

A remote HTTP response splitting vulnerability exists in a2aproject a2a-java 1.2.0 , specifically in the BasePushNotificationSender.dispatchNotification function (file: server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java) within the Authorization Header Con...

EUVD-2026-78085

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java of the component Authorization Header...

CVE-2024-25175

CVE-2024-25175 HTTPレスポンススプリッティングによる反射型XSS 説明 : この脆弱性を悪用すると、特別に細工されたリンクをクリックした際に、被害者のブラウザでJavaScriptコードが実行される（クロスサイトスクリプティング）可能性があります。この脆弱性は、Webサーバーが改行（\r\n または CR\LF、urlencodeでは %0d%0a）を正しく処理しないために発生します。 影響 : 反射型XSS CVSSv3.1ベクター : AV:N/AC:L/PR:N/UI:R/S:C:C/L:I/L:A:N 6.1 CWE : CWE-20: 不適切な入力検証...

Astra Linux – Vulnerability in JRuby

Before Ruby 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an HTTP Response Splitting attack was possible. An attacker could inject a crafted key and value into an HTTP response for the WEBrick HTTP server...

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

CVE-2024-40324

CVE-2024-40324 描述 E-Staff v5.1 中存在一个 CRLF 注入漏洞，攻击者可以在输入字段中插入回车CR和换行LF字符，导致 HTTP 响应拆分和头部操纵。 漏洞类型 CRLF 产品供应商 E-Staff 受影响产品代码库 E-Staff 5.1 受影响组件 HTTP 头部 攻击类型 远程 影响：代码执行 可能导致任意头部注入、缓存中毒、会话劫持、跨站脚本XSS及其他利用。 发现者 Aleksey Vistorobskiy 攻击向量 攻击者可以在输入字段中插入 CRLF 字符，操纵 HTTP 头部。例如，向 HTTP 头部注入 CRLF 可能导致 HTTP 响应拆...

crlfmap

CRLFMap CRLFMapは、HTTP Splittingの脆弱性を発見するためのツールです。 なぜ？ Golangで並行処理のためのツールを書きたいと思いました。 パラメータとパスの両方をファジングできるようにしたいと思いました。 インストール root@kitploit: go get github.com/ryandamour/crlfmap ヘルプ root@kitploit: Available Commands: help Help about any command scan A scanner for all your CRLF needs Flags: -h,...

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

undici: undici: HTTP response splitting via retry interceptor

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Skyhigh Secure Web Gateway（旧McAfee Web Gateway）におけるHTTP Response...

CVE-2026-18540

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

安全公告：未经验证的响应头值导致的 HTTP 响应拆分（rouille） 分配的 CVE ID： CVE-2026-66746 摘要 rouille 在将响应头值写入客户端时，不会检查其中是否包含 回车符或换行符。因此，应用程序若将受攻击者影响的文本 放入响应头值，就会在线路上发出额外的响应头，甚至是 整整第二个 HTTP 响应。 rouille 的两个特性使该漏洞在普通代码中也能触达。Request::getparam 会进行百分号解码，因此查询字符串中的 %0d%0a 会变成真正的 CRLF。 而 session::session 会将客户端自己的 Cookie 值复制到...

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

Linux Distros Unpatched Vulnerability : CVE-2026-59314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file...

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

DEBIAN-CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

UBUNTU-CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

Linux Distros Unpatched Vulnerability : CVE-2026-77341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly...

CVE-2026-77341 cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...