public-pentesting-reports

Public penetration testing reports A repository containing public penetration test reports published by consulting firms and academic security groups. Maintained by Julio @ Blaze Information Security https://www.blazeinfosec.com. Based on a list started in 2015 by Arne Padmos. See this repo for a...

CVE-2026-106933

The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in th...

CVE-2026-106933

The Blaze Demo Importer WordPress plugin, in versions prior to 1.0.17 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is a failure to sanitize uploaded SVG files and the unconditional registration of the SVG MIME type for the WordPress media library. This allows authen...

CVE-2026-106933 Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via SVG Upload

The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in th...

EUVD-2026-104083

The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in th...

PT-2026-117230

The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in th...

CVE-2026-106933: Improper Neutralization of Input During Web Page Generation

The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in th...

Thunderstorm

Thunderstorm Non hai 4.000 finding. Hai sei percorsi verso i tuoi gioielli della corona. Un CSPM ti consegna una lista piatta, deduplicata e ordinata per severità di misconfigurazioni e ti lascia indovinare quali contano. Thunderstorm ragiona sulla raggiungibilità : raccoglie il tuo cloud in sola...

CVE-2026-69209

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbounded message buffering because defragmentation accumulates fragments without a limit and FrameTranscoder accepts declared lengths up to Int.MaxValue. A remote client that...

EUVD-2026-79173

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbounded message buffering because defragmentation accumulates fragments without a limit and FrameTranscoder accepts declared lengths up to Int.MaxValue. A remote client that...

CVE-2026-69209: Uncontrolled Resource Consumption

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbounded message buffering because defragmentation accumulates fragments without a limit and FrameTranscoder accepts declared lengths up to Int.MaxValue. A remote client that...

io.github.valdemargr:gql-http4s_2.13 (>=0.1-a2fae94, <=0.1-6257648), io.github.valdemargr:gql-server-http4s_2.13 (>=0.1-5acc59b, <=0.2.8-23-b552e1c) +3 more potentially affected by CVE-2026-73494 via org.http4s:blaze-http_2.13 (>=1.0.0-m33, <=1.0.0-m41)

org.http4s:blaze-http2.13 MAVEN version =1.0.0-m33, =0.1-a2fae94, =0.1-5acc59b, =1.0.0-m33, =1.0.0-m33, =1.0.0-m33, =1.0.0-m41 Source cves: CVE-2026-73494 Source advisory: SNYK:JAVA-ORGHTTP4S-19822072...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

ch.j3t:zio-prefetcher_2.13 (>=0.3.0, <=0.8.0-rc6), com.akolov:doorman_2.13 (>=0.2.0, <=0.4.0) +130 more potentially affected by CVE-2026-73494 via org.http4s:http4s-blaze-server_2.13 (>=0.21.0-m1, <=0.23.17)

org.http4s:http4s-blaze-server2.13 MAVEN version =0.21.0-m1, =0.3.0, =0.2.0, =0.18.0, =0.1.21, =0.1.21, =0.1.21, =0.1.21, =0.0.7-m1, =0.0.6-m4, =0.0.6-m4, =0.5.0-m2, =0.5.0-m1, =0.0.38, =0.0.38, =0.0.38, =0.1.0.1 and more Source cves: CVE-2026-73494 Source advisory: SNYK:JAVA-ORGHTTP4S-19822088...

com.clovellytech:h4sm-auth_2.12 (0.0.14), com.clovellytech:h4sm-dbtesting_2.12 (0.0.14) +7 more potentially affected by CVE-2026-73494 via org.http4s:http4s-blaze-server_2.12 (>=1.0.0-m20, <=1.0-234-d1a2b53)

org.http4s:http4s-blaze-server2.12 MAVEN version =1.0.0-m20, =1.0.0-rc1, =0.1, =0.12.0-rc1+85-6d61581e, =0.12.0-rc1+125-f68e01bd Source cves: CVE-2026-73494 Source advisory: SNYK:JAVA-ORGHTTP4S-19822083...