CVE-2026-78660

The HTTP/2 implementation is vulnerable to response smuggling because it allows malformed framing-related headers that do not interfere with HTTP/2 framing. When acting as a reverse proxy , the implementation may forward these headers to an HTTP/1 client . If the client also lacks strict behavior...

EUVD-2026-95425

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

CVE-2026-78660

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

CVE-2026-56866

The http.Transport component is vulnerable to a desynchronization issue when handling HTTP/1 CONNECT requests with a non-empty Request.Body . The underlying cause is that the transport writes the body directly to the connection without framing; if a server rejects the request with a non-2xx keep-...

CVE-2026-56866

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CVE-2026-56866 HTTP/1 client connection desynchronization after CONNECT rejection in net/http

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CVE-2026-56866 HTTP/1 client connection desynchronization after CONNECT rejection in net/http

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CVE-2026-56866

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

GO-2026-6610 HTTP/2 transport accepts malformed framing-related headers in net/http

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

GO-2026-6605 HTTP/1 client connection desynchronization after CONNECT rejection in net/http

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CVE-2026-41096-PoC

🛡️ AI Security Tool Module CVE-2026-41096: Windows DNSAPI.dll Heap Overflow DNS-Mayhem Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview This module provides...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template 参考链接 漏洞产生原因： 1. 当攻击者可以直接访问Solr控制台时，可以通过发送类似/节点名/config的POST请求对该节点的配置文件做更改。 2. Apache...

cups-script-final-project

기능 설명 CVE-2025-58060의 2단계 탐지 도구로, Common UNIX Printing System CUPS의 인증 우회 취약점입니다. 버전 번호만으로 판단하지 않고, 배너 기반 버전 검사와 활성 인증 우회 프로브를 결합합니다. Server 헤더가 패치 버전을 생략하더라도 실제 취약점 상태를 확인하는 데 도움이 됩니다. 1단계 — 버전 확인 CUPS 웹 인터페이스포트 631에서 Server: HTTP 헤더를 읽고, 감지된 버전을 패치 임계값 2, 4, 13과 비교합니다. 배너가 CUPS/2.4잘린 버전만 보고하면,...

soc-analyst-hub

🛡️ SOC 분석가 허브 — Tier 1 툴킷 Tier 1 SOC 분석가를 위한 무료 완전 오프라인 대화형 툴킷 — 침해 대응, 알림 분류, 위협 헌팅 및 분석가 온보딩을 다룹니다. 종속성 없음. 단일 HTML 파일. 아무 브라우저에서 열기. 🚀 라이브 데모 → 📦 내부 구성 ⚡ 침해 대응 체크리스트 가장 일반적인 침해 유형에 대한 단계별 대화형 체크리스트. 작업하면서 단계를 체크 — 진행 상황이 자동으로 저장됩니다. 피싱 이메일 조사 12단계 악성코드 / 엔드포인트 침해 12단계 무차별 대입 / 자격 증명 공격 12단계 데이터...

security checks

🔍 Miner Hunter 리눅스 서버용 암호화폐 채굴기 탐지, 제거 및 강화 도구 키트. 실제 침해 대응 경험을 바탕으로 제작 — 루트킷 기법을 사용하여 ps, top, htop, btop에서 숨는 채굴기를 탐지합니다. 📦 설치 git clone https://gitlab.com/abdom.seada/security-checks.git cd security-checks sudo bash setup.sh 🔀 브랜치: master — 이 도구 키트는 master 브랜치에 있습니다. 향후 다른 보안 스크립트가 별도 브랜치에 추가될...

teamcity-cve-2026-63077-remediation

エンタープライズセキュリティ修復スイート 4つの専門的なインシデント対応およびハードニングパッケージを含む、本番環境グレードのセキュリティエンジニアリングスイートです。 📁 リポジトリモジュールアーキテクチャ . ├── README.md エンタープライズスイートインデックス＆クイックスタート ├── package.json マスターテストランナー（Jest + Python unittest スイート） ├── .gitignore 本番リポジトリ除外設定 │ ├── supply-chain-security/ ターゲット1:...

CVE-2024-49138-SOC-Investigation

CVE-2024-49138 悪用調査 プラットフォーム: LetsDefend SOCトレーニング環境 アラート: SOC335 - CVE-2024-49138 悪用が検出されました カテゴリ: 権限昇格 | マルウェア解析 | インシデントレスポンス ステータス: 調査完了 ✅ 概要 この調査では、Windowsエンドポイント上でCVE-2024-49138の悪用が疑われるアラートに対応しました。...

EUVD-2026-95156

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

CVE-2026-105570

Docker Sandboxes are vulnerable to a security bypass where OAuth response masking can be circumvented using a case-variant token host . The root cause is a discrepancy in case sensitivity handling: the system compares OAuth token-endpoint hostnames case-sensitvely for masking decisions, but reque...