PT-2026-108133

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes performed case-sensitive comparisons of OAuth token-endpoint hostnames when determining if managed credential responses should be masked, whereas request routing...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791459292)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791459292 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791458607)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791458607 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

PT-2026-108311

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The HTTP/2 implementation is lax regarding malformed framing-related headers. When acting as a reverse proxy, the system may forward responses containing these...

PT-2026-108309

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description When http.Transport sends an HTTP/1 CONNECT request containing a non-empty Request.Body, the body is written directly to the connection without framing following the request headers. If the server...

CVE-2026-97714 Denial of service vulnerability in Secure Access

CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service...

CVE-2026-97714 Denial of service vulnerability in Secure Access

CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service...

THM-Tempest

TryHackMe — Tempest SOC Level 1 Pathway | इंसिडेंट रिस्पॉन्स जाँच अवलोकन समझौता की गई Windows मशीन की पूर्ण इंसिडेंट रिस्पॉन्स जाँच। हमलावर ने CVE-2022-30190 Follina का शोषण करने वाले एक दुर्भावनापूर्ण Word दस्तावेज़ के माध्यम से प्रारंभिक पहुँच प्राप्त की, स्थायित्व स्थापित किया, Chisel का उपयोग...

CVE-2025-66478

1 POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

nextjs-rce-incident-response

Resposta a Incidente de RCE no Next.js — CVE-2025-55182 Tipo: Resposta a Incidente em Produção ao Vivo Vulnerabilidade: CVE-2025-55182 — Componentes do Servidor React Desserialização Insegura RCE Sistema Afetado: Frontend Next.js + servidor de produção remoto Função: Estagiário de Cibersegurança ...

BIT-APACHE-2026-63718 Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Pesquisa sobre Falha de Autenticação no Apache CVE-2024-38476 Preparado por: Abanoub Ehab 🛡️ Clube de Estudantes de Telecomunicações da Huawei - AOU Um artigo de pesquisa técnica abrangente sobre a vulnerabilidade de ambiguidade semântica no Apache HTTP Server e seu impacto no tratamento de...

CVE-2022-37177

CVE-2022-37177 - Algoritmo Criptográfico Quebrado ou Arriscado do HireVue Ao visitar o link de convite para entrevista que o HireVue fornece para uma entrevista, você é direcionado a uma página de termos onde concorda com os termos antes de iniciar o processo de entrevista gravada e cronometrada...

CVE-2015-7547-master

Estamos a fornecer este código tal como está. Você é responsável por proteger a si mesmo, seus bens e dados, e os outros de quaisquer riscos causados por este código. Este código pode causar comportamento inesperado e indesejado na sua máquina. Este código pode não detetar a vulnerabilidade no se...

CVE-2023-0214

SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Prova de conceito para a vulnerabilidade HTTP Response Splitting no Skyhigh Secure Web...

GhostTrace

GhostTrace पता लगाएं कि Windows पर सॉफ़्टवेयर ने क्या पीछे छोड़ा है, इससे पहले कि वह वापस आ जाए। GhostTrace एक स्थानीय Windows फोरेंसिक ट्रेस हंटर है जो इंसिडेंट रिस्पॉन्डर्स, सिस्टम एडमिनिस्ट्रेटर और सुरक्षा-जागरूक पावर उपयोगकर्ताओं के लिए बनाया गया है। यह पर्सिस्टेंस, एक्ज़ीक्यूशन, गतिविधि और ब...

PT-2026-107669

CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service...

CVE-2025-64458-Demo

CVE-2025-64458 — DoS de Redirecionamento do Django no Windows Descrição Um problema de negação de serviço DoS nas respostas de redirecionamento do Django permite que um atacante acione trabalho excessivo da CPU durante a normalização de URL ao construir respostas de redirecionamento. No Windows, ...

CVE-2026-106512

The sachertortephp application contains a vulnerability in the CakeResponse::download() method located in lib/Cake/Network/CakeResponse.php. The root cause is the direct interpolation of unsanitized, caller-supplied filenames into a Content-Disposition header. Two injection vectors exist: using C...

CVE-2026-106512 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS

The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...