nowafpls

nowafpls 目录 nowafpls 已记录的 WAF 限制 安装 nowafpls 使用 nowafpls 作者 许可证 nowafpls 大多数 Web 应用防火墙（WAF）在发送请求体时，对其可以处理的数据量存在限制。这意味着对于包含请求体的 HTTP 请求（即 POST、PUT、PATCH 等），通常可以通过简单地在前面添加垃圾数据来绕过 WAF。 当请求被填充这些垃圾数据后，WAF 将处理请求中最多 X KB 的数据并进行分析，但超过 WAF 限制之后的所有内容都会直接通过。 nowafpls 是一个简单的 Burp 插件，它会在 Repeater...

GO-2026-6620 fzf vulnerable to denial of service through quadratic HTTP request-body accumulation in github.com/junegunn/fzf

fzf vulnerable to denial of service through quadratic HTTP request-body accumulation in github.com/junegunn/fzf...

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

ImpactAny authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramete...

BIT-TOMCAT-2026-78383 Apache Tomcat: AJP DoS via missing request body

Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.0 through 10.1.59, from 9.0.0 through...

Rocky Linux 8 [CIQ] Security Update: python3.11-urllib3 (crlsa-2024_11189)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202411189 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: resource-agents / resource-agents-aliyun / etc Multiple Vulnerabilities (crlsa-2024_2952)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242952 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 pycryptodome: side-channel leakage for OAEP...

Rocky Linux 9 [CIQ] Security Update: python3.11-urllib3 (crlsa-2024_11238)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202411238 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 Tenable has extracted the preceding description bloc...

NPM: fastify vulnerable to request body replacement via an async validation result collision

NPM: fastify vulnerable to request body replacement via an async validation result collision vulnerability discovered by ? in WordPress Npm fastify versions 5.12.2...

fastify vulnerable to request body replacement via an async validation result collision

Impact Fastify runs a route's validator and, for a result shaped like value, error , unwraps it: an error becomes a validation failure and value replaces the request part. This convention is intended for synchronous custom compilers for example Joi. A JSON Schema $async validator, however, resolv...

EUVD-2026-70984

fastify vulnerable to request body replacement via an async validation result collision...

CVE-2017-14980.RCE

CVE-2017-14980 このエクスプロイトは、Windows 10 x86, build: 16299 上で動作する Sync Breeze Enterprise バージョン 10.0.28 を対象としています。認証されていない攻撃者が HTTP リクエストボディ を介して バッファオーバーフロー を実行し、任意のコード実行 につなげることができます。このエクスプロイトは、すべてのセキュリティ緩和策（例: ASLR、CFG、DEP）が無効になっていることを前提としています。 !NOTE このプロジェクトは、Windows...

GHSA-3CV6-JPF6-8222 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...

CVE-2025-1974

README 口で言うのは簡単だ。コードを見てみろ。 詳細は https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities で確認できます。 使い方 1. shell.c 内の IP を変更する。 2. Docker が利用可能か確認し、make shell.so を実行する。nginx-ingress-controller は musl-libc ベースのため、確実に動作させるには Alpine で .so をビルドする必要があります 3. python3 exploit.py を実行してシェルを取得する。 25 行目...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

CVE-2026-34040-PoC

CVE-2026-34040 — Docker/Moby AuthZ プラグイン バイパス（ラボ PoC） KO: Docker（Moby）の認可（AuthZ）プラグインを 1MB を超えるリクエストボディ でバイパスする脆弱性の実習用再現プロジェクトです。 EN: Docker（Moby）の認可（AuthZ）プラグインを 1MB を超えるリクエストボディ でバイパスする脆弱性のラボ再現です。 脆弱性の事実 / 脆弱性の詳細 項目| 値 ---|--- CVE| CVE-2026-34040 CVSS 3.1| 8.8（High）—...

ALSA-2026:72279 Critical: ipa security, bug fix, and enhancement update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

Linux Distros Unpatched Vulnerability : CVE-2026-92284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving http.request.body...