4909 matches found
CVE-2026-23527 h3 v1 has Request Smuggling (TE.TE) issue
H3 is a minimal HTTP framework built for high performance and portability. Prior to 1.15.5, there is a critical HTTP Request Smuggling vulnerability. readRawBody is doing a strict case-sensitive check for the Transfer-Encoding header. It explicitly looks for "chunked", but per the RFC, this heade...
CVE-2026-23527
CVE-2026-23527 affects the h3 HTTP framework (pre-1.15.5). The vulnerability is in readRawBody, which performs a strict case-sensitive check for the Transfer-Encoding header and looks for the literal value “chunked.” Because RFC requires case-insensitive handling, an attacker can craft a request ...
CVE-2026-22913
creationtimestamp| type| source ---|---|--- 2026-01-15 14:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchqs3uhuv2c 2026-01-15 15:12:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...
CVE-2026-22642
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23581
creationtimestamp| type| source ---|---|--- 2026-01-15 08:09:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mch5246cwq2y...
H3 Environmental Issues and Vulnerabilities
H3 is an open-source HTTP framework developed by H3. Versions prior to H3 1.15.5 contained an environmental issue vulnerability. This vulnerability stemmed from the strict case-sensitive handling of the Transfer-Encoding header, which could lead to HTTP request payload attacks...
PT-2026-3146
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.5.6 Description Deno is a JavaScript, TypeScript, and WebAssembly runtime. A previous attempt to prevent the execution of Windows batch and shell files by checking file extensions .bat or .cmd was ineffective due to a...
PT-2026-3098
Name of the Vulnerable Software and Affected Versions H3 versions prior to 1.15.5 Description H3 is a minimal HTTP framework designed for high performance and portability. A critical HTTP Request Smuggling issue exists due to a case-sensitive check for the 'Transfer-Encoding' header within the...
CVE-2026-0880
creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mcgbqyshaj2x 2026-01-15 15:20:08+00:00| seen|...
EUVD-2026-2486
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpuencoderphyswbsetupctl, but in a single place the check is missing. Also use convenient locals instead of physenc- where availabl...
EUVD-2026-2521
Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session...
CVE-2026-0813
creationtimestamp| type| source ---|---|--- 2026-01-14 09:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcerdbhybi2u...
EUVD-2026-2595
EUVD-2026-2595...
EUVD-2026-2625
EUVD-2026-2625...
EUVD-2026-2632
EUVD-2026-2632...
EUVD-2026-2067
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and...
EUVD-2026-2104
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-2168
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...