cve-2026-69243-poc-aiohttp-smuggling

CVE-2026-69243 — aiohttp 요청 스머글링 CWE-444 aiohttp 또는 Rust 버전을 빌드하세요 의존성 없음, 표준 라이브러리만 사용: git clone https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling cd cve-2026-69243-poc-aiohttp-smuggling/poc cargo build --release ./target/release/cve-2026-69243-poc 사전 빌드된 바이너리는 릴리스 워크플로를 통해 릴리스에...

nextssrf

╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 스캐너 및 익스플로잇 ║ ║ Next.js WebSocket 업그레이드 핸들러 SSRF ║ ║ 영향 버전: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — 버그 바운티 도구 ║ ╚══════════════════════════════════════════════════════════════╝...

verify-ghsa-c4j6-fc7j-m34r

verify-ghsa-c4j6-fc7j-m34r GHSA-c4j6-fc7j-m34r / CVE-2026-44578 에 대한 인밴드 검증기 — Next.js에서 WebSocket 업그레이드 요청을 통한 서버사이드 요청 위조SSRF. ⚠️ 승인된 보안 테스트용으로만 사용하십시오. 이 스크립트에 전달하는 모든 대상에 대해 테스트할 권한이 있는지 확인하는 책임은 본인에게 있습니다. 취약점 필드| 값 ---|--- CVE| CVE-2026-44578 GHSA| GHSA-c4j6-fc7j-m34r CWE| CWE-918 SSRF CVSS...

cve-2018-1002105

이 내용은 https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/에서 수정되었습니다. 모든 공로는 Gravitational의 친절한 분들께 있습니다. 원본 PoC 코드는 취약점 확인을 넘어서 실제로 첫 번째 네임스페이스의 첫 번째 컨테이너 내에서 명령을 실행하도록 수정되었습니다. 이 경우, 대부분의 클러스터에서 기본 네임스페이스의 첫 번째 파드/컨테이너 내에서 curl -s google.com을 실행합니다. 여기서부터 실제 도구를 만...

CVE-2026-44578

🚨 CVE-2026-44578 — Уязвимость SSRF в Next.js 📌 Обзор CVE-2026-44578 — это уязвимость подделки серверных запросов SSRF высокой степени серьезности , затрагивающая Next.js приложения, размещенные самостоятельно. Злоумышленники могут использовать специально созданные запросы на обновление WebSocket ...

CVE-2026-44578-next-js-ssrf

CVE-2026-44578 — Next.js WebSocket 업그레이드 SSRF 실습 환경 Next.js 자체 호스팅self-hosted 애플리케이션에서 Node.js 내장 서버를 사용할 때 발생하는 CVE-2026-44578 CWE-918, SSRF 취약점을 재현하기 위한 자체 포함 실습 환경입니다. 필드| 값 ---|--- CVE| CVE-2026-44578 GHSA| GHSA-c4j6-fc7j-m34r CVSS 3.1| 8.6 HIGH AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 유형| SSRF...

CVE-2026-44578-PoC

CVE-2026-44578 - Next.js WebSocket SSRF PoC 취약점: Next.js WebSocket 업그레이드 핸들러의 서버 측 요청 위조 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 사용법 Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel to internal Redis python3 poc.py target.com:3000 --internal 127.0.0.1:6379 --payload "INFO\r\n" Tunne...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket 업그레이드 SSRF Next.js 자체 호스팅 배포 환경에서 인증 없이 악용 가능한 서버 측 요청 위조SSRF 취약점입니다. 단 하나의 조작된 HTTP 요청으로 localhost:80에서 AWS 자격 증명, 비밀값, 내부 서비스 데이터를 탈취할 수 있습니다. 필드| 값 ---|--- CVE| CVE-2026-44578 GHSA| GHSA-c4j6-fc7j-m34r CVSS 3.1| 8.6 HIGH AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 유형...

CVE-2020-7693

CVE-2020-7693 Poc 참고: CVE-2020-7693용 페이로드가 버그 바운티 프로그램에서 실행 가능함을 확인합니다 설명: websocket 값을 갖는 Upgrade 헤더의 잘못된 처리는 sockjs 앱을 호스팅하는 컨테이너를 충돌시킵니다. 이는 0.3.20 이전의 sockjs 패키지에 영향을 미칩니다. 오래된 sockjs-node를 통한 단일 요청 서버 충돌: 요청 GET /sockjs-node/000/ HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 X11; Lin...

CVE-2026-100558

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade request...

CVE-2026-100527

OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pending-authentication capacity. Attackers can hold every pending slot by maintaining silent WebSocket upgrades, preventing paired extensions...

CVE-2026-100558 OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade request...

EUVD-2026-87492

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade request...

CVE-2026-100558 OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade request...

CVE-2026-100558 OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade request...

CVE-2026-100558

OpenClaw versions prior to 2026.8.1 are susceptible to a resource exhaustion vulnerability within the Gateway listener . This flaw allows unauthenticated clients to retain response sockets by submitting WebSocket upgrade requests that do not align with expected connection semantics. By repeatedly...

CVE-2026-100527 OpenClaw before 2026.8.2 Denial of Service via Browser Relay

OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pending-authentication capacity. Attackers can hold every pending slot by maintaining silent WebSocket upgrades, preventing paired extensions...

cve-2018-1002105

CVE-2018-1002105 Утилита для проверки, которая проверяет кластер на наличие критической уязвимости Kubernetes, опубликованной здесь. Обзор этой уязвимости для заинтересованных сторон можно найти по адресу https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/...

SUSE CVE-2026-67405

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler deps/rabbitmqwebmqtt/src/rabbitwebmqtthandler.erl:104 nor the Web-STOMP handler deps/rabbitmqwebstomp/src/rabbitwebstomphandler.erl:102 validates the Origin head...

CVE-2026-67405

A flaw was found in RabbitMQ's Web-MQTT and Web-STOMP handlers. These handlers do not properly validate the Origin header during a WebSocket upgrade. When specific non-default configurations are enabled, such as usehttpauth=true for Web-STOMP or sslcertlogin=true for both plugins, an attacker can...