Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift 취약점 툴킷 CVE-2026-42945nginx의 치명적인 RCE 취약점를 스캔, 패치, 테스트하기 위한 종합 툴킷 목차 개요 CVE 세부 정보 기능 툴킷 구성 요소 요구 사항 설치 사용법 워크플로 예시 보안 고려 사항 문제 해결 기여 개요 이 툴킷은 CVE-2026-42945nginx 메인라인 1.26.3 미만, 안정판 1.24.1 미만에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점를 스캔, 패치, 테스트하기 위한 포괄적인 도구를 제공합니다. 이 취약점은 힙 스프레이 기법...

email-header-analyzer

Analizador de Cabeceras de Correo Electrónico MHA ¿Qué es el Analizador de Cabeceras de Correo Electrónico MHA? El Analizador de Cabeceras de Correo Electrónico es una herramienta escrita en flask para analizar cabeceras de correo electrónico y convertirlas a un formato legible por humanos, y...

CVE-2024-39929

CVE-2024-39929 PoC Sintesi della vulnerabilità Exim fino alla versione 4.97.1 analizza erroneamente un nome di file di intestazione RFC 2231 multilinea; di conseguenza, gli aggressori remoti possono aggirare il meccanismo di protezione $mimefilename per il blocco delle estensioni e potenzialmente...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - Bypass ACL Panoramica Questo progetto dimostra CVE-2021-40346 , una vulnerabilità critica di integer overflow in HAProxy che consente attacchi di HTTP Request Smuggling per aggirare i controlli di sicurezza. Punteggio CVSSv3: 7.5 Alto Collaboratori...

EUVD-2026-67203

The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizin...

EUVD-2026-67199

DeadLetterPublishingRecovererFactory reads the retrytopic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigIntegerheader.value with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit Ein kleiner Python-Testclient zum Senden von HTTP-GET-Anfragen mit einem überdimensionierten Authorization: Basic-Header. Dieses Tool ist für Labortests und Forschung zu Header-Parsing-Problemen gedacht z. B. Null-Dereference-/Absturzfehler wie CVE-2025-4476 in libsoup. Es...

cve-2025-54874-poc

Riferimento https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Ambiente di Test openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Descrizione la catena di chiamate di funzioni è:...

CVE-2021-40346

CVE-2021-40346 हेडर अनुरोध आंतरिक प्रतिनिधित्व पर इंटीजर ओवरफ्लो HTTP रिक्वेस्ट स्मगलिंग की अनुमति देता है। यह रिपॉजिटरी docker-compose का उपयोग करके निर्मित एक PoC प्रस्तुत करता है, जिसमें दो डॉकर इमेज शामिल हैं: एक HaProxy के कमजोर संस्करण इस मामले में 2.2.16 के साथ और एक Flask वेब सर्वर जो WSG...

SpringCloudFunction-Research

SpringCloudFunction-Research Ricerca su CVE-2022-22963 Ambiente vulfocus/spring-cloud-function-rce:latest Causa Problema di analisi del parametro spring.cloud.function.routing-expression nell'Header della richiesta, che porta ad un attacco di iniezione del Payload. Riferimenti...

PT-2026-81475

Name of the Vulnerable Software and Affected Versions eml parser versions prior to 3.0.2 Description The header fetch parse function within the eml parser.parser.HeaderParser module uses email.utils.getaddresses to parse address-bearing e-mail headers. A deeply nested CFWS Comments and Folding...

Astra Linux – Vulnerability in dovecot

Very large headers can cause resource exhaustion when parsing messages. The message parser usually reads relatively small chunks of the message. However, when these smaller chunks are fed into the message-header parser, the “fullvalue” buffer starts to grow excessively. The “fullvalue” buffer has...

Astra Linux – Vulnerability in qtbase-opensource-src

A issue was discovered in Qt before version 5.15.14, in versions 6.x before 6.2.9, and in versions 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security HSTS header, allowing unencrypted connections to be established, even when such connections are explicit...

Astra Linux – Vulnerability in Thunderbird

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text is never displayed to the user. This is because the text is interpreted as a MIME message, and the first paragraph is always treated as part of an email header section. A digitally signed text...

Astra Linux - Vulnerability in Golang-1.19

HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate significantly more memory than is...

CVE-2026-74693 net: prestera: validate firmware header length

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...

EUVD-2026-64380

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...

CVE-2026-59323 Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service DoS due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12...

CVE-2026-59323

CVE-2026-59323 is a denial-of-service vulnerability in io.micrometer:micrometer-tracing-bridge-brave caused by unbounded object allocation when parsing W3C baggage headers. Incoming baggage entries are processed without enforcing limits on entry count or header size, leading to unconditional Bagg...