email-header-analyzer

ई-मेल हेडर विश्लेषक MHA ई-मेल हेडर विश्लेषक MHA क्या है: ई-मेल हेडर विश्लेषक flask में लिखा गया एक उपकरण है जो ईमेल हेडर को पार्स करने और उन्हें मानव-पढ़ने योग्य प्रारूप में परिवर्तित करने के लिए है, और यह निम्नलिखित भी कर सकता है: हॉप देरी की पहचान करें। ईमेल के स्रोत की पहचान करें। हॉप देश की...

Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

SpringCloudFunction-Research

SpringCloudFunction-Research CVE-2022-22963 अनुसंधान पर्यावरण vulfocus/spring-cloud-function-rce:latest कारण Request Header में spring.cloud.function.routing-expression पैरामीटर पार्सिंग समस्या, जिससे Payload इंजेक्शन हमला होता है। संदर्भ...

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 مجموعة أدوات ثغرة Nginx Rift مجموعة أدوات شاملة لمسح وتصحيح واختبار CVE-2026-42945 - ثغرة RCE خطيرة في nginx جدول المحتويات نظرة عامة تفاصيل CVE الميزات مكونات المجموعة المتطلبات التثبيت الاستخدام أمثلة سير العمل اعتبارات الأمان استكشاف الأخطاء وإصلاحها المساهمة نظرة عامة توفر هذه...

CVE-2025-4476-Exploit

استغلال CVE-2025-4476-Exploit عميل اختبار صغير بلغة Python لإرسال طلبات HTTP GET مع ترويسة Authorization: Basic كبيرة الحجم. هذه الأداة مخصصة للاختبار المخبري والبحث في مشاكل تحليل الترويسات مثل أخطاء إلغاء الإشارة / أعطال الانهيار مثل CVE-2025-4476 في libsoup. توضح كيف يمكن لتبادل عميل-خادم مع...

cve-2025-54874-poc

المرجع https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ بيئة الاختبار openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux الوصف سلسلة استدعاء الدوال هي: opjreadheader ← opjjp2readheader ...

CVE-2021-40346

CVE-2021-40346 Un dépassement d'entier sur la représentation interne de l'en-tête de requête permet le trafic smuggling HTTP. Ce dépôt présente un PoC construit avec docker-compose utilisant deux images docker : l'une avec une version vulnérable de HaProxy dans ce cas 2.2.16 et l'autre avec un...

CVE-2026-84429

A flaw was found in Django. Inefficient processing occurs when the HTTP header parsing function handles quoted parameter values containing numerous separator characters. A remote, unauthenticated attacker could exploit this flaw by sending requests with crafted header parameters, causing excessiv...

CVE-2026-84429 Potential denial-of-service vulnerability in HTTP header parsing

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.http.parseheaderparameters was subject to a potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter. An...

Astra Linux – Vulnerability in Thunderbird

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text is never displayed to the user. This is because the text is interpreted as a MIME message, and the first paragraph is always treated as part of an email header section. A digitally signed text...

Astra Linux – Vulnerability in qtbase-opensource-src

A issue was discovered in Qt before version 5.15.14, in versions 6.x before 6.2.9, and in versions 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security HSTS header, allowing unencrypted connections to be established, even when such connections are explicit...

Astra Linux – Vulnerability in Golang-1.19

HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate significantly more memory than is...

[SECURITY] [DLA 4821-1] perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 05, 2026 https://wiki.debian.org/LTS -...

CVE-2024-39929

CVE-2024-39929 प्रमाण-अवधारणा भेद्यता संक्षिप्त विवरण Exim 4.97.1 तक के संस्करण मल्टीलाइन RFC 2231 हेडर फ़ाइलनाम का गलत विश्लेषण करते हैं, और इस प्रकार दूरस्थ हमलावर $mimefilename एक्सटेंशन-ब्लॉकिंग सुरक्षा तंत्र को बायपास कर सकते हैं, और संभावित रूप से अंतिम उपयोगकर्ताओं के मेलबॉक्स में निष्पादन...

Debian dla-4821 : libperl-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4821 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected]...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP अनुरोध तस्करी - ACL बायपास अवलोकन यह प्रोजेक्ट CVE-2021-40346 को प्रदर्शित करता है, जो HAProxy में एक गंभीर पूर्णांक अतिप्रवाह भेद्यता है जो सुरक्षा नियंत्रणों को बायपास करने के लिए HTTP अनुरोध तस्करी हमलों को सक्षम बनाती है। CVSSv3 स्कोर: 7.5 उच्च योगदानकर्ता: 1. Boi...

Rocky Linux 9 [CIQ] Security Update: opentelemetry-collector (crlsa-2025_3411)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20253411 advisory. golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-30204 Tenable has extracted the preceding description block directly from t...

AlmaLinux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1778836031)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778836031 advisory. - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in...

Rocky Linux 8 [CIQ] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (crlsa-2023_3082)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20233082 advisory. rubygem-rack: Denial of service in Multipart MIME parsing CVE-2023-27530 rubygem-rack: denial of service in header parsing CVE-2023-27539 Tenable has...

Rocky Linux 8 [CIQ] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (crlsa-2024_2953)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242953 advisory. rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-25126 rubygem-rack: Possible DoS Vulnerability with Range Header in Rac...