cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat 部分 PUT リクエスト処理における RCE...

CVE-2026-24733

CVE-2026-24733 CVE-2026-24733とは？ Apache Tomcatは、特定のsecurity-constraint設定において、HTTP/0.9形式のHEADリクエストを誤って処理していました。 CVE-2026-24733 防御的検証ツール CVE-2026-24733 （Apache TomcatのHTTP/0.9 HEAD security-constraintバイパス）に対応する、軽量で依存関係のないPythonセキュリティ検証ツールです。 本プロジェクトは以下の用途を想定しています： ブルーチーム SOCアナリスト 脆弱性管理チーム...

cve-2025-29927-lab

このリポジトリには、Next.js を使用して構築された意図的に脆弱な Webアプリケーションが含まれています。これは、CVE-2025-29927として知られるセキュリティ問題を実演し、研究するために設計されています。 このプロジェクトの目的は、セキュリティ研究者、学生、バグバウンティハンターが、実際の環境に近い状況で脆弱性がどのように機能するかを理解するのを助けることです。 !CAUTION このアプリケーションは意図的に安全ではなく、本番環境にデプロイしてはなりません 。 🔩目的 脆弱性の仕組みを学ぶ 安全に特定し、悪用する練習をする 安全でないミドルウェア処理の影響を理解する...

CVE-2019-16278

CVE-2019-16278 - Nostromo nhttpd RCE 脆弱性の説明 Nostromo nhttpd バージョン 1.9.6 以前における、HTTPリクエスト処理内のディレクトリトラバーサルを利用したリモートコード実行の脆弱性。 影響を受けるバージョン Nostromo nhttpd 1.9.6 以前 エクスプロイトの詳細 このエクスプロイトは、URLエンコードされたCRLF文字（%0d）を使用してディレクトリトラバーサル脆弱性を悪用し、/bin/shにアクセスして任意のコマンドを実行します。 動作の仕組み： 1...

CVE-2025-55182

CVE-2025-55182 Next.js プロトタイプ汚染 CVE-2025-55182 は、nextjs における重大なプロトタイプ汚染の脆弱性であり、フレームワークのリクエスト処理機構における不適切な入力サニタイズを介して RCE を許容します。これは、nextjs が JSON オブジェクトを無知な初心者のように信頼しているために発生します。 POC root@kitploit: 1 リクエスト解析におけるプロトタイプ汚染: nextjs はプロトタイプチェーンを汚染可能なオブジェクトを不適切にサニタイズします。 2 安全でないデシリアライゼーション: フレームワークは JSO...

EUVD-2026-78884

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests...

ROS-20260915-73-0131

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X server’s request handling. A non-zero value for “bytes to ignore” in a client’s request can cause the server to skip processing another client’s request, potentially leading to a denial of service...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: A missing check for the encryption key size was fixed in the L2CAPLEConnREQ. This addition ensures that the key size is checked upon receiving the L2CAPLEConnREQ, which is required by L2CAP/LE/CFC/BV-15-C. This...

ROS-20260911-73-0119

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260910-73-0147

The vulnerability in Chromium is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260910-73-0092

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260909-73-0078

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

UBUNTU-CVE-2026-85152

undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream...

CVE-2026-84645

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

EUVD-2026-68615

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

CVE-2026-21827

HCL Connections is affected by an information disclosure vulnerability caused by improper handling of request data , potentially allowing a user to obtain sensitive information they are not entitled to access. The CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexi...

CVE-2026-21827 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...