CVE-2022-22978-PoC

CVE 2022-22978: Authorization Bypass in RegexRequestMatcher 🥶 Overview According to the information I have gathered, this vulnerability is related to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2024-29025 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable...

EUVD-2026-101577

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

Security Bulletin: IBM Terracotta is affected by Jetty vulnerabilities that could allow attackers to bypass security controls, hijack user sessions, or access unauthorized data

Summary IBM Terracotta utilizes Jetty as a lightweight Java-based web server and servlet container that allows developers to run web applications and provide machine-to-machine communications. Vulnerability Details CVEID:CVE-2026-19203 DESCRIPTION: A client may issue specially crafted HTTP/1.1...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an HTTP request smuggling vulnerability due to Eclipse Jetty

Summary Eclipse Jetty is used by IBM Integrated Analytics System as a web server and servlet container. CVE-2026-19203 affects Eclipse Jetty due to accepting a lone line-feed LF character as a terminator in chunked request parsing such as in chunk extensions, chunk data termination, or trailer...

Security Bulletin:Vulnerabilities exists in Jetty package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-19203 DESCRIPTION: A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediar...

shiro-cve-2022-32532

Apache Shiro CVE-2022-32532 Reproduction Environment This is a minimal web application for reproducing CVE-2022-32532 Apache Shiro RegExPatternMatcher authentication bypass. Vulnerability Description CVE : CVE-2022-32532 Affected versions : Shiro 1.9.1 Cause : RegExPatternMatcher does not properl...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

CLEANSTART-2026-PP37381 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Security vulnerability affects the cri-tools package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1779748834)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779748834 advisory. - CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 Note that Nessus has not tested for this issue but...

AlmaLinux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.6:CLSA-2026:1779788314)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779788314 advisory. - CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 Note that Nessus has not tested for this issue but...

Rocky Linux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.6:CLSA-2026:1779788314)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779788314 advisory. - CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 Note that Nessus has not tested for this issue b...

CLEANSTART-2026-RQ84574 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Security vulnerability affects the buildkitd package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...

Rocky Linux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779886202)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779886202 advisory. - When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Pat...

AlmaLinux 9.2 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.2:CLSA-2026:1779875599)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779875599 advisory. - CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 Note that Nessus has not tested for this issue but...

CLEANSTART-2026-CU60639 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Security vulnerability affects the argo-workflows package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...

SUSE CVE-2026-91839

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...

CVE-2026-100717

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and fragment components returned by parseurl, and never inspects the userinfo user:pass@ components. This is an incomplete fix f...

CVE-2026-100717

The froxlor server administration panel (versions 2.3.10 and earlier ) contains a CRLF injection vulnerability. The Validate::validateUrl component fails to inspect the userinfo (user:pass@) portion of a URL for carriage return and line feed characters. An authenticated low-privilege customer wit...

EUVD-2026-87690

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and fragment components returned by parseurl, and never inspects the userinfo user:pass@ components. This is an incomplete fix f...