CVE-2026-69664

A flaw was found in Erlang/OTP inets httpd. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed chunked HTTP request. Specifically, if the chunk-size line is not a hexadecimal number and arrives separately from the headers, the server worker handling the reque...

CVE-2026-84645

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

otp: inets: Erlang/OTP inets httpd: Denial of Service via malformed chunked HTTP request

A flaw was found in Erlang/OTP inets httpd. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed chunked HTTP request. Specifically, if the chunk-size line is not a hexadecimal number and arrives separately from the headers, the server worker handling the reque...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Liberty impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

Summary Multiple vulnerabilities in IBM WebSphere Liberty impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent. Vulnerability Details CVEID:CVE-2026-50645 DESCRIPTION: There is no restriction on the amount of attachment headers that a message can contai...

The vulnerability of the cstecgi.cgi microprogramming system of the TOTOLINK WA1200-PoE router allows a hacker to cause a service failure.

The vulnerability of the cstecgi.cgi microprogramming system of the TOTOLINK WA1200-PoE router is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted HTTP request to the router’s management...

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Font component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

HTTP Request Smuggling

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to HTTP Request Smuggling in its query parsing helpers, which do not terminate at the URL fragment and parse a ? appearing after a as the start of the query string. An attack...

HTTP Request Smuggling

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to HTTP Request Smuggling in its query parsing helpers, which do not terminate at the URL fragment and parse a ? appearing after a as the start of the query string. An attacker can smuggle...

HTTP Request Smuggling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent parsing of HTTP requests. An attacker can access confidential responses intended for other...

CVE-2026-78605

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2021-31188

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:42+00:00| seen| https://t.me/hackingAttack/8312 2026-09-02 01:03:18+00:00| seen| https://t.me/hackingAttack/8312 2026-09-08 07:00:05+00:00| seen| https://t.me/hackingAttack/8312 2026-09-09 00:00:39+00:00| seen|...

CVE-2026-78605

Elasticsearch is affected by an HTTP Request Smuggling flaw (CWE-444) that can lead to information disclosure . Under specific proxy deployment configurations, a network attacker with no prior authentication could obtain confidential responses intended for other authenticated users. The CVSS 3.1 ...

EUVD-2026-69568

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-141)

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Elasticsearch Leading to Information Disclosure Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under...

Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow released in August 2026.. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1,...