EUVD-2026-87760

Netty's HttpServerCodec io.netty:netty-codec-http in versions 4.2.0.Final through 4.2.16.Final and in versions up to and including 4.1.136.Final pairs each outbound response with an inbound request by calling pollMethod once per response, including for 1xx informational responses. If a client...

crlfmap

CRLFMap CRLFMapは、HTTP Splittingの脆弱性を発見するためのツールです。 なぜ？ Golangで並行処理のためのツールを書きたいと思いました。 パラメータとパスの両方をファジングできるようにしたいと思いました。 インストール root@kitploit: go get github.com/ryandamour/crlfmap ヘルプ root@kitploit: Available Commands: help Help about any command scan A scanner for all your CRLF needs Flags: -h,...

-cve-2021-45232

近日、https://Hellofhackers.com で完全な記事を公開予定です...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Skyhigh Secure Web Gateway（旧McAfee Web Gateway）におけるHTTP Response...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

セキュリティアドバイザリ: 未検証のレスポンスヘッダー値によるHTTPレスポンススプリッティング rouille 割り当てられたCVE ID: CVE-2026-66746 概要 rouilleは、キャリッジリターンやラインフィードをチェックせずにレスポンスヘッダー値をクライアントに書き込みます。したがって、攻撃者の影響を受けたテキストをヘッダー値に配置するアプリケーションは、余分なヘッダー、または完全な2つ目のHTTPレスポンス全体をワイヤ上に送出します。...

CVE-2026-93711

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

DEBIAN-CVE-2026-93711

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

EUVD-2026-84257

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

CVE-2026-93711 Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

CVE-2026-93711

Dancer2 versions before 2.2.0 for Perl are vulnerable to CRLF injection because the headers_to_array routine fails to strip CR and LF characters from response header names, though it does strip them from values. Because the name remains intact, it reaches the PSGI server and, if not validated, is...

CVE-2026-93711

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

CVE-2026-93711 Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...

Linux Distros Unpatched Vulnerability : CVE-2026-93711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value...

CVE-2024-25175

CVE-2024-25175 HTTPレスポンススプリッティングによる反射型XSS 説明 : この脆弱性を悪用すると、特別に細工されたリンクをクリックした際に、被害者のブラウザでJavaScriptコードが実行される（クロスサイトスクリプティング）可能性があります。この脆弱性は、Webサーバーが改行（\r\n または CR\LF、urlencodeでは %0d%0a）を正しく処理しないために発生します。 影響 : 反射型XSS CVSSv3.1ベクター : AV:N/AC:L/PR:N/UI:R/S:C:C/L:I/L:A:N 6.1 CWE : CWE-20: 不適切な入力検証...

Linux Distros Unpatched Vulnerability : CVE-2026-93579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage...

CVE-2024-40324

CVE-2024-40324 説明 E-Staff v5.1 における CRLF インジェクションの脆弱性により、攻撃者は入力フィールドに復帰 CR および改行 LF 文字を挿入でき、HTTP レスポンス分割やヘッダー操作を引き起こす可能性があります。 脆弱性の種類 CRLF 製品ベンダー E-Staff 影響を受ける製品コードベース E-Staff 5.1 影響を受けるコンポーネント HTTP ヘッダー 攻撃タイプ リモート 影響: コード実行 任意のヘッダーインジェクション、キャッシュポイズニング、セッションハイジャック、クロスサイトスクリプティング...

CVE-2026-93579

A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...

DEBIAN-CVE-2026-93579

A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...

UBUNTU-CVE-2026-93579

A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...

CVE-2026-93579

A vulnerability in Netty's netty-codec-http2 module allows a remote attacker to inject prohibited characters—NUL, Line Feed, and Carriage Return —into HTTP/2 header field values due to insufficient default validation. When such values cross an HTTP/2 to HTTP/1.1 translation boundary , the injecte...