CVE-2024-24919-Bulk-Scanner

ماسح ضخم لـ CVE-2024-24919 CVE-2024-24919 إفشاء معلومات لـ Check Point Security Gateway النص البرمجي مبني على، والفضل يعود إلى: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ يقوم هذا النص البرمجي بفحص قائمة عناوين URL بحثًا عن ثغرة CVE-2024-24919 عن طريق إرسال طلبات POS...

CVE-2026-Mastodon-Streaming-CRLF-Injection

CVE-2026-XXXXX : injection d'en-tête de réponse HTTP CRLF dans le serveur de streaming Mastodon Aperçu de la vulnérabilité Élément| Détails ---|--- ID CVE| CVE-2026-XXXXX Produit concerné| Mastodon Streaming Server Version concernée| = 4.5.9 Composant| streaming/index.js, lignes 188-206 Type de...

CLEANSTART-2026-VO74481 undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header

CVE-2026-84933 affects multiple packages. undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. See references for individual vulnerability details...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Avis de sécurité : Scission de réponse HTTP via des valeurs d'en-tête de réponse non validées rouille Identifiant CVE attribué : CVE-2026-66746 Résumé rouille écrit les valeurs d'en-tête de réponse au client sans les vérifier pour détecter un retour chariot ou un saut de ligne. Une application qu...

CVE-2026-27944

CVE-2026-27944 - Téléchargement et déchiffrement non authentifiés de sauvegarde Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red Une preuve de concept PoC pour CVE‑2026‑27944, une vulnérabilité...

Astra Linux – Vulnerability in Squid

A issue was discovered in Squid 4.x before 4.15, and in 5.x before 5.0.6. If a remote server sends a certain response header via HTTP or HTTPS, it can lead to a denial of service. This header can potentially appear in legitimate network traffic...

CVE-2023-35813

CVE-2023-35813 CVE-2023-35813 هو إثبات مفهوم يُستخدم لتحديد ما إذا كانت نسخة من Sitecore معرضة للخطر من خلال تحليل رأس استجابة الخادم للتعديل. مصنوع بحب بواسطة heretic 3...

CVE-2017-1000486

CVE-2017-1000486 Exploit d'exécution de code à distance pour PrimeFaces 5.x - Injection EL CVE-2017-1000486 Il s'agit essentiellement du même exploit réalisé par Mogwailabs, mais modifié pour fonctionner dans des environnements fermés sans accès à Internet ou avec un trafic sortant bloqué par le...

UBUNTU-CVE-2026-93711

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

CVE-2026-93711

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

SUSE CVE-2026-85732

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then...

CVE-2026-85077 Sanic: HTTP response header injection via missing CR/LF validation in Sanic HTTP/1.1 responses

Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return or line-feed characters. Applications that place...

SUSE CVE-2026-9679

Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 5.4 does not specify any decoding and browsers do not decode either. Applications that parse a...

PT-2026-93849

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description The parseLink function in registry/remote/utils.go fails to validate the scheme, host, or port of absolute URLs provided in the Link response header from a registry. This allows a malicious registry ...

Astra Linux – Vulnerability in Apache2

Before Apache HTTP Server 2.4.55, a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers serve any security purposes, they will not be interpreted by the client...

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

CVE-2026-84933

undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, which is the default, an otherwise cacheable response that carries a Set-Cookie header, for example one marked with a...

httpc memory exhaustion via unbounded response header accumulation

...

Security Bulletin: XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-36431)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability. Vulnerability Details CVEID:CVE-2025-36431 DESCRIPTION: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.01 is vulnerable to cross-site...

CVE-2026-48769

A flaw was found in Incus, a container and virtual machine manager. A malicious image server can cause the Incus client to write files to arbitrary locations via a crafted response header, potentially leading to command execution as root. Mitigation No mitigation is needed as Incus is not shipped...