[SECURITY] Fedora 43 Update: erlang-cowboy-2.18.0-1.fc43

Small, fast, modular HTTP server written in Erlang...

[SECURITY] Fedora 44 Update: erlang-cowboy-2.18.0-1.fc44

Small, fast, modular HTTP server written in Erlang...

PT-2026-72036

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

Exploit for Path Traversal in Apache Http_Server

Портфолио. Усольцев Глеб Студент 2 курса, Институт компьютерн...

CVE-2026-17272 IBM i is Affected By a Denial of Service in HTTP Server []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...

CVE-2026-18071

IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-18071 due to improper privilege management in the HTTP Server, enabling a local attacker to gain elevated privileges (CWE-269). Base CVSS v3.1 score is 7.8 (HIGH) with LOCAL, low attack complexity, requiring LOW privileges and no user interact...

CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

GHSA-RM43-82J9-R4MJ atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read

The optional dashboard HTTP server atomicagents/dashboard/serve.py builds filesystem paths directly from the request path and serves them without a containment check. It is the only per-request untrusted-path site in the codebase that does not route through io.saferesolveunder. Literal ../ segmen...

UBUNTU-CVE-2026-73145

GHSA-58ph-q79f-7x9x: HTTP server: unbounded request accumulation...

CVE-2026-73145

GHSA-58ph-q79f-7x9x: HTTP server: unbounded request accumulation...

Apache HTTPD: Multiple Vulnerabilities

Background The Apache HTTP server is one of the most popular web servers on the Internet. Description Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

Security Bulletin: IBM i is Affected By An Improper Management Vulnerability in HTTP Server [CVE-2026-18071]

Summary IBM i is vulnerable to elevated privileges due to improper privilege management CVE-2026-18071 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18071 DESCRIPTION: IBM i could allow a local attacker to gain elevated privileges due to...

CVE-2026-73296

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without...

K000162882: Node.js vulnerability CVE-2026-21710

Security Advisory Description A flaw in Node.js HTTP request handling causes an uncaught TypeError when a request is received with a header named proto and the application accesses req.headersDistinct. When this occurs, dest"proto" resolves to Object.prototype rather than undefined, causing .push...

HTTP/2 Bomb CVE-2026-49975

...

K000162870: Apache HTTP server vulnerability CVE-2026-43951

Security Advisory Description Out-of-bounds Read vulnerability in Apache HTTP Server with modheaders and modmime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. CVE-2026-43951 A remote attacker may be able to disclose sensitive information on the...

CVE-2026-73145

GHSA-58ph-q79f-7x9x: HTTP server: unbounded request accumulation...

Exploit for Path Traversal in Apache Http_Server

AI 오케스트레이션 기반 CVE 분석 — CVE-2021-41773 AI에게 CVE 분석을 시키고, A...

SUSE CVE-2026-6993

A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the component http.DefaultServeMux Fallback Handler. The manipulation results in unintended intermediary. The attack may be launched remotely. The explo...