627 matches found
CVE-2026-34040-PoC
CVE-2026-34040 — Docker/Moby AuthZ Plugin Bypass Lab PoC KO: DockerMoby의 인가AuthZ 플러그인을 1MB를 초과하는 요청 본문 으로 우회하는 취약점의 실습용 재현 프로젝트입니다. EN: A lab reproduction of a vulnerability that bypasses Docker Moby authorization AuthZ plugins using an oversized 1MB request body. Vulnerability facts / 취약점 사실 Ite...
CVE-2026-84504
fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. If a request that passes its route schema contains a property named value at the root, fastify replaces the entire request body with that...
CVE-2026-84504
A flaw was found in fastify. An authenticated low-privilege caller can exploit a vulnerability where the framework incorrectly processes the result of an Ajv asynchronous async validator. If a request body contains a root-level property named 'value', fastify replaces the entire request body with...
CVE-2026-84504
fastify versions before 5.12.2 are vulnerable to a request body replacement flaw caused by an Ajv async validator result collision. When a request that passes its route schema contains a root-level property named value, fastify treats that property as the value result protocol used by custom vali...
CVE-2026-84504 fastify vulnerable to request body replacement via an async validation result collision
fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. If a request that passes its route schema contains a property named value at the root, fastify replaces the entire request body with that...
EUVD-2026-70984
fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. If a request that passes its route schema contains a property named value at the root, fastify replaces the entire request body with that...
nowafpls
nowafpls 目录 nowafpls 已记录的 WAF 限制 安装 nowafpls 使用 nowafpls 作者 许可证 nowafpls 大多数 Web 应用防火墙（WAF）在发送请求体时，对其可以处理的数据量存在限制。这意味着对于包含请求体的 HTTP 请求（即 POST、PUT、PATCH 等），通常可以通过简单地在前面添加垃圾数据来绕过 WAF。 当请求被填充这些垃圾数据后，WAF 将处理请求中最多 X KB 的数据并进行分析，但超过 WAF 限制之后的所有内容都会直接通过。 nowafpls 是一个简单的 Burp 插件，它会在 Repeater...
CVE-2017-14980.RCE
CVE-2017-14980 El exploit apunta a Sync Breeze Enterprise ejecutándose en Windows 10 x86, build: 16299 , afectando la versión 10.0.28 , donde un atacante no autenticado puede realizar un desbordamiento de búfer a través del cuerpo de una solicitud HTTP , resultando en ejecución de código...
EUVD-2026-61221
fastify vulnerable to schema validation bypass via root primitive coercion mismatch...
CVE-2025-1974
README 口で言うのは簡単だ。コードを見てみろ。 詳細は https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities で確認できます。 使い方 1. shell.c 内の IP を変更する。 2. Docker が利用可能か確認し、make shell.so を実行する。nginx-ingress-controller は musl-libc ベースのため、確実に動作させるには Alpine で .so をビルドする必要があります 3. python3 exploit.py を実行してシェルを取得する。 25 行目...
EUVD-2026-56887
Django REST framework: Potential bypass of Django DATAUPLOADMAXMEMORYSIZE when parsing oversized JSON and urlencoded request bodies via DRF request.data...
EUVD-2026-69226
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...
CVE-2026-71380
CVE-2026-71380 is a Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd . An unauthenticated remote attacker can trigger a denial of service by sending valid request headers declaring a large Content-Length and then stalling before the body is complete. In...
CVE-2026-71380
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...
CVE-2026-71380 httpd applies no timeout while receiving a request body, parking a worker on a stalled client
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...
CVE-2026-42931
A flaw was found in Gitea. An authenticated attacker can trigger a denial of service by sending a large HTTP request to the NPM package tag API endpoint. The server attempts to read the entire request body into memory without a size limit, leading to an Out-of-Memory OOM error and crashing the...
SUSE SLES15 Security Update : grafana (SUSE-SU-2026:3718-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3718-1 advisory. grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: - CVE-2026-39882: Prevent memory exhaustion DoS in...
CVE-2026-80049
Airbyte Platform through 2.0.0 suffers a cross-workspace authorization bypass. The root cause is that AuthorizationServerHandler extracts a caller-supplied workspaceId from the raw JSON request body and sets it in the X-Airbyte-Workspace-Id header, which AuthenticationHeaderResolver.resolveWorksp...
CVE-2026-80049 Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request body into X-Airbyte- headers, and AuthenticationHeaderResolver.resolveWorkspace consults...