Apache2 - Transfer-Encoding Chunked XSS

Apache2 PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 contain a reflected cross-site scripting vulnerability caused by mishandling of chunked transfer-encoding requests in sapi/apache2handler/sapiapache2.c. Attackers can execute malicious scripts via crafted...

nginx-1.4.0

nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling Solo a scopo educativo Configurazione root@kitploit: $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Test Conferma che /admin ...

CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-

Avviso di sicurezza: HTTP Request Smuggling tramite desincronizzazione del Transfer-Encoding rouille ID CVE assegnato: CVE-2026-67181 Riepilogo rouille::proxy::proxy inoltra l'header Transfer-Encoding del client al backend senza modifiche, ma scrive il corpo della richiesta che tinyhttp ha già...

CVE-2025-55315

CVE-2025-55315 Proof-of-concept Exploit für CVE-2025-55315 .NET HTTP Request Smuggling. Zeigt, wie fehlerhaft geparste Chunked-Encoding es Angreifern ermöglicht, Requests an Proxys und Load Balancern in verwundbaren ASP.NET Core/Kestrel-Servern vorbeizuschmuggeln. 📊 Präsentation Interaktive...

CVE-2020-25613

प्रमाण root@kitploit: POST / HTTP/1.1 Host: 127.0.0.1:1080 Content-Type: text/html Content-Length: 129 Connection: keep-alive Transfer-Encoding: 0xb chunked 1 A 0 POST /flag HTTP/1.1 Host: 127.0.0.1:1080 Content-Length: 180 Connection: keep-alive Content-Type: text/html URI:...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA dalla versione 1.1.15 fino alla 1.3.2 è vulnerabile a Buffer Overflow. La vulnerabilità è causata da una logica di validazione errata durante la gestione delle richieste HTTP che utilizzano la codifica di trasporto a chunk. Ciò fa sì che altro codice utilizzi...

CVE-2019-19945_Test

CVE-2019-19945Test Este é o código para o primeiro CVE proposto 1. Instale o Docker 2. Construa e execute o servidor cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. Obtenha o IP do contêiner do servidor Linux sudo docker container inspect server | grep -i...

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE Detection & Exploitation Tool Strumento di rilevamento ed exploit per CVE-2024-21762 - Vulnerabilità critica in FortiGate SSL VPN ⚠️ AVVISO LEGALE : Questo strumento è esclusivamente per uso in ambienti di test autorizzati. L'uso non autorizzato su sistemi è...

CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

Sicherheitshinweis: Negatives Chunk-Größen-Parsing verursacht Speicherkorruption in facil.io Zugewiesene CVE-ID : CVE-2026-66731 Produkt: facil.io Betroffene Versionen: facil.io = 0.7.5 0.7.5, 0.7.6, master; eingeführt, als der 0.8.x HTTP/1.1-Parser in 0.7.5 zurückportiert wurde – nicht vorhanden...

DEBIAN-CVE-2026-73256

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The httpcb function in src/http.c tests hm.proto.len with an...

AZL-97533 CVE-2026-63379 affecting package mysql 8.0.46-1

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and merges them into request headers. The fix introduces evhttpparseheadersimpl and a temporary trailer header list. An unauthenticated remote...

CVE-2026-73256

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The httpcb function in src/http.c tests hm.proto.len with an...

EUVD-2026-63497

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The httpcb function in src/http.c tests hm.proto.len with an...

CVE-2026-73256

Mongoose (an embedded web server and network library by cesanta) prior to 7.22 is vulnerable to HTTP request smuggling via chunked Transfer-Encoding. The root cause is a logic error in http_cb() in src/http.c: it tests hm.proto.len with an impossible greater-than-eight condition, so is_http_1_0 i...

JLSEC-2026-1270

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This...

CVE-2026-14180 Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

CVE-2026-14180

Summary : CVE-2026-14180 affects the Undertow HTTP server’s ChunkReader used by WildFly/JBoss EAP. The root cause is a single internal variable used for both the remaining chunk size and state flags, enabling a crafted oversized chunk-size request to cause overlap and trigger a second, “smuggled”...

UBUNTU-CVE-2026-67297

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

CVE-2026-66731

facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser that allows unauthenticated remote attackers to crash the server by sending a negative chunk size value. Attackers can send a single POST request with a Transfer-Encoding:...