347939 matches found
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...
CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
CVE-2026-78659
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
CVE-2026-97031
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...
react2shell
React2Shell React सर्वर घटकों / सर्वर कार्रवाइयों CVE-2025-55182 और CVE-2025-66478 में प्रोटोटाइप प्रदूषण कमजोरियों का शोषण करने, कमजोर सर्वरों पर दूरस्थ कोड निष्पादन RCE सक्षम करने के लिए एक CLI उपकरण। मूल PoC : https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc चेतावनी: यह उपक...
Unihackers---CVE-2025-55182-
इटालियन गैंग React2Shell PoC यह रिपॉजिटरी एक न्यूनतम जानबूझकर कमजोर वातावरण प्रदान करता है ताकि React Server Components और Next.js को प्रभावित करने वाली हालिया गंभीर RCE कमजोरी React2Shell के विरुद्ध सुरक्षा स्कैनर का परीक्षण किया जा सके। CVE-2025-55182 : React Server Components के संस्करण 19.0.0...
CVE-2025-12999
A flaw was found in openvsx-server. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on client machines through HTTP cache poisoning. The server generates download and verification URLs from untrusted proxy headers, such as X-Forwarded-Host, without...
EXPLOIT-CVE-2025-55182
CVE-2025-55182 प्रमाण अवधारणा अवलोकन CVE-2025-55182 React2Shell का एक व्यावहारिक प्रदर्शन - React सर्वर घटकों में एक गंभीर RCE भेद्यता। भेद्यता विवरण CVE ID : CVE-2025-55182 प्रकार : प्रोटोटाइप प्रदूषण के माध्यम से दूरस्थ कोड निष्पादन CVSS : 9.8 गंभीर प्रभावित : React 19.0.0, 19.1.0, 19.1.1, 19.2...
AZL-106833 CVE-2026-107718 affecting package httpd 2.4.68-1
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2026-107718
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2025-55182_liyon
CVE-2025-55182 - React Server Components RCE ⚠️ कानूनी घोषणा : यह उपकरण केवल सुरक्षा अनुसंधान, अधिकृत पेनिट्रेशन परीक्षण और शैक्षिक उद्देश्यों के लिए है। बिना स्पष्ट अनुमति के इस उपकरण का लक्ष्य प्रणाली पर उपयोग करना अवैध और अनैतिक है। 📋 अवलोकन CVE-2025-55182 React Server Components RSC में एक...
EUVD-2026-95342
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2026-107718
The AdonisJS HTTP Server package is vulnerable to open redirects in versions prior to 8.2.3 and 9.3.0 . The root cause is the failure to use encodeURIComponent within the shared createURL() helper, which is utilized by Router.makeUrl() and Response.redirect().toRoute(). If an application includes...
CVE-2026-107718 AdonisJS: Unencoded route parameters can produce open redirects
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...
AgrusScanner
Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...
React2shell-CVE-2025-55182-checker
CVE-2025-55182 React2Shell डिटेक्शन टूल आपके इंफ्रास्ट्रक्चर में असुरक्षित React Server Components खोजने के लिए डिटेक्शन टूल्स। त्वरित प्रारंभ Install dependencies pip3 install requests Version detection passive, safe for production python3 checker.py -u https://your-app.com क्या असुरक्षित है Rea...
GHSA-477H-4R7F-FVRX vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, nextcloud-server, commercial-gitlab-rails-ee...
