CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

보안 권고: 구문 분석되지 않은 Transfer-Encoding 값으로 인한 HTTP 요청 스머글링 tinyhttp 배정된 CVE ID: CVE-2026-66752 요약 tinyhttp는 Transfer-Encoding 헤더가 존재하는지만 확인합니다. 값을 전혀 확인하지 않습니다. chunked가 아닌 코딩이나 마지막 요소가 chunked가 아닌 코딩 목록을 포함한 모든 값이 본문을 청크 디코딩하게 하며, 동시에 Content-Length는 무시됩니다. 전송 코딩을 올바르게 구문 분석하는 프런트 엔드는 이러한 요청을...

CVE-2024-40725

Инструмент обнаружения контрабанды HTTP-запросов Этот репозиторий содержит инструмент на Python для обнаружения уязвимостей контрабанды HTTP-запросов, специально нацеленный на CVE-2024-40725. Инструмент пытается использовать эту уязвимость в Apache HTTP Server путем отправки специально...

CVE-2022-20474

Analyse de CVE-2022-20474 – Bundle auto-modifié sous LazyValue Préface Note : avant de lire cet article, il est conseillé d'avoir une compréhension de base des vulnérabilités de décalage de Bundle. Si vous n'avez pas encore lu les documents suivants, veuillez d'abord les consulter : 1. Bundle...

cve-2021-34558

POC pour CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client Une modification mineure a été apportée à ./vendor/github.com/refraction-networking/utls/handshakeserver.go...

CVE-2025-43300

CVE-2025-43300：iOS/macOS DNG图像处理内存损坏 概述 CVE-2025-43300 是苹果图像处理框架中的一个关键内存损坏漏洞，影响 iOS 18.6.1 和 macOS 系统。该漏洞存在于 RawCamera.bundle 中的 JPEG 无损解压缩代码中，由 DNG 文件中 TIFF 元数据与 JPEG 流参数之间的不一致性触发。 漏洞详情 根本原因 漏洞源于 DNG（数字负片）文件中的元数据/流不一致： 1. TIFF 头中的 SamplesPerPixel 元数据 指示预期的颜色分量 2. JPEG 无损流中的 SOF3 分量计数 指定实际数据分量 3...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 PoC нельзя использовать Все ресурсы взяты из этой статьи https://bbs.kanxue.com/thread-268506.htm Основной причиной этой уязвимости является несоответствие чтения и записи объекта Parcel, что можно проследить до следующего кода: root@kitploit: public void...

WAF_buster

WAFbuster Нарушение работы WAF за счет манипуляции SSL/TLS шифрами О WAFbuster Этот инструмент был создан для анализа шифров, поддерживаемых межсетевым экраном веб-приложений WAF на стороне веб-сервера. Ссылка: https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.htm...

CVE-2023-36281

CVE-2023-36281 PoC von CVE-2023-36281 Ich habe mich auf diesen PoC bezogen. Leider funktioniert es nicht, da die Indizes von subprocess.Popen in jeder Python-Umgebung unterschiedlich sind. Mein PoC-Code behebt dieses Problem jedoch. Installation $ pip install -r requirements.txt Ausführung 1...

CVE-2025-51679

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

CVE-2026-74736

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-74736

CVE-2026-74736 is a Linux kernel vulnerability in the net/sched cls_bpf classifier. The function cls_bpf_prog_from_efd() retrieved a SCHED_CLS program via bpf_prog_get_type_dev() without verifying that a device-bound (offloaded) BPF program's bound netdev matched the target TC netdev. This allowe...

CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

EUVD-2026-66347

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

CVE-2026-18664

NSD (a DNS server maintained by NLnet Labs) contains a flaw in its ACL range comparison logic. On little-endian systems , IP addresses are compared using the host's native endianness instead of network byte order (big-endian) , which is the correct format for the stored values. This affects both ...

CVE-2026-18664 Wrong interpretation of ACL ranges

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

CVE-2022-23222

CVE-2022-23222 Klick hier, wenn du das Ding einfach nur bauen und ausführen willst. Was folgt, ist mehr oder weniger eine Übersetzung des chinesischen Writeups, verfügbar hier. Wir verwenden den Mainline-Kernel-Code für Version 5.13.0 als Referenz. Es gibt eine Diskrepanz zwischen den verfügbaren...

CVE-2025-51679

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

EUVD-2025-210801

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

PoC-CVE-2020-9715

CVE-2020-9715 EDR सत्यापन PoC Adobe Acrobat Reader DC के EScript.api ESObject कैश में Use-after-free भेद्यता। केवल अधिकृत रेड टीम EDR परीक्षण के लिए। भेद्यता Adobe Acrobat Reader DC = 2020.009.20063। EScript इंजन डेटा ESObjects को उन कुंजियों के साथ कैश करता है जो मूल एन्कोडिंग ANSI या Unicode को...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...