Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling For educational purposes only Setup $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Test Confirm /admin is denied. $ curl...

node-poc-http-smuggling

This repository does not have a README...

CVE-2021-40346-POC

CVE-2021-40346-POC CVE-2021-40346 integer overflow enables http smuggling Integer overflow leading to HTTP request smuggling Chinese analysis: HAProxy Request Smuggling Vulnerability CVE-2021-40346 Analysis Reference:...

CVE-2019-20372

CVE-2019-20372 This repository is for educational purposes only. /server vulnerable server run ./server.sh /exploit.py exploit script run python3 exploit.py importante! https://blkcipher.pl/assets/pdfs/2019-12-10-errorpagerequestsmuggling.pdf https://github.com/vuongnv3389-sec/CVE-2019-20372 why...

smugglefuzz

SmuggleFuzz SmuggleFuzz, a configurable and rapid HTTP downgrade smuggling scanner. Empowering users with customizable gadget lists, it offers deeper insights into the reasons behind failed smuggling attacks. I am confident that numerous HTTP downgrade-based smuggling vulnerabilities remain...

BurpSuiteHTTPSmuggler

Burp Suite HTTP Smuggler A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques. This extension has been developed by Soroush Dalili @irsdl from NCC Group. The initial release v0.1 only supports the Encoding capability that can be quite...

CVE-2021-3064

CVE-2021-3064: Pan-OS Remote Buffer Overflow + HTTP Smuggling Exploit This exploit uses an HTTP Smuggling vuln to deliver a payload to an otherwise inaccessible endpoint on Pan-OS firewalls; the endpoint is vulnerable to an overflow that can be exploited to run arbitrary code as root on the...

Astra Linux – vulnerability in libsoup3

A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability arises because libsoup fails to properly validate hostnames, allowing special characters to be injected into HTTP headers. A remote attacker could exploit this to perform HTTP smuggling, sendi...

Astra Linux – vulnerability in haproxy

An integer overflow exists in htxaddheader within HAProxy versions 2.0 through 2.5; this vulnerability can be exploited to carry out HTTP request smuggling attacks. As a result, attackers can bypass all configured http-request HAProxy ACLs as well as potentially other ACLs...

Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty

Summary IBM Watson Explorer contains a vulnerable version of IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-14981 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the...

CVE-2026-82672

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

EUVD-2026-83608

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

EEF-CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections

Summary Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent request...

[SECURITY] [DLA 4786-1] libevent security update

Debian LTS Advisory DLA-4786-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson September 18, 2026 https://wiki.debian.org/LTS Package : libevent Version : 2.1.12-stable-8+deb12u1 CVE ID : CVE-2026-63379 CVE-2026-63381 CVE-2026-63382 CVE-2026-63383 CVE-2026-633...

EulerOS Virtualization 2.12.1 : nghttp2 (EulerOS-SA-2026-3601)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content- Length header and body ont...

Debian dla-4786 : libevent-2.1-7 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4786 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4786-1 [email protected]...

libevent security update

2.1.8-11 - Fix CVE-2026-63385: HTTP header injection via CRLF in header values - Resolves: RHEL-253566 2.1.8-10 - Fix CVE-2026-63387: out-of-bounds write in evdns dnsnametolabels - Resolves: RHEL-249889 2.1.8-9 - Fix CVE-2026-63383: out-of-bounds read in decodetaginternal - Resolves: RHEL-250240...

EUVD-2023-60690

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain...

Astra Linux – Vulnerability in Netty

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace such as a spaceTransfer-Encoding:chunked line and a later Content-Length header. This issue exists due to an incomplete fix for CVE-2019-16869...