833 matches found
EUVD-2026-117406
Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...
CVE-2026-73095 Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handling
Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...
CVE-2026-73095
Apache Juneau versions through 9.2.0 are vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability. The MessagePack parser , enabled by default in the REST server, sizes buffers based on length values provided in the input. An unauthenticated client can send a small amou...
SUSE CVE-2026-110944
Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...
CVE-2026-110944
Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...
CVE-2026-110944
A resource exhaustion vulnerability exists in the HTTP request handling of the QHttpServer component within Qt HTTP Server . The issue is caused by the allocation of resources without limits or throttling (CWE-770). This vulnerability can impact the availability of the affected service. No specif...
CVE-2026-110944: qt Qt Framework: Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server.
Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...
CVE-2025-55182
CVE-2025-55182 Next.js Prototype Pollution CVE-2025-55182 is a critical prototype pollution vulnerability in nextjs that allows rce via improper input sanitization in the framework's request handling mechanism, this whole thing happens because nextjs is out here trusting JSON objects like a...
CVE-2026-24733
CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incorrectly handled an HTTP/0.9-style HEAD request under certain security-constraint configurations. CVE-2026-24733 Defensive Verifier A lightweight, dependency-free Python security verifier for CVE-2026-24733 , an Apache Tomcat HTTP/0.9 HEAD...
cve-2025-29927-lab
This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...
CVE-2019-16278
CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Description Remote Code Execution vulnerability in Nostromo nhttpd versions 2&1 Usage python3 cve-2019-16278.py Example: python3 cve-2019-16278.py 192.168.1.100 80 "id" python3 cve-2019-16278.py 10.10.10.10 8080 "cat /etc/passwd" python3...
CLEANSTART-2025-YY45740 flaw was found in the X server's request handling
Security vulnerability affects the xorg-server package. A flaw was found in the X server's request handling...
cve-2025-43564-tomcat_put_rce_reproduction
CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147034)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147034 advisory. A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's reques...
SUSE SLES15 Security Update : squid (SUSE-SU-2026:4909-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4909-1 advisory. - CVE-2023-5824: Multiple issues in HTTP response caching bsc1216496. - CVE-2023-49288: Use-After-Free in the HTTP Collapsed...
Security update for squid
This update for squid fixes the following issues: CVE-2023-5824: Multiple issues in HTTP response caching bsc1216496. CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature bsc1217825. CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to th...
SUSE-SU-2026:4909-1 Security update for squid
This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching bsc1216496. - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature bsc1217825. - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads...
CLEANSTART-2026-LE11033 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request
Security vulnerability affects the php package. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request...
