840522 matches found
CVE-2026-111750 AIOHTTP: Pure-Python parser request smuggling
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an application uses AIOHTTPNOEXTENSIONS or otherwise runs without a...
CVE-2026-111750 AIOHTTP: Pure-Python parser request smuggling
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an application uses AIOHTTPNOEXTENSIONS or otherwise runs without a...
GHSA-J7H2-66J4-GHJF A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...
CVE-2026-111062
The russh SSH server library (all releases from 0.34.0-beta.1 through 0.63.3 and main ) contains a vulnerability where it fails to verify that the signature algorithm matches the one requested in the publickey authentication request. Specifically, in russh/src/server/encrypted.rs, the server deco...
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...
CVE-2026-111749
The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to a flaw where a subdomain can remove the Host-Only scope from an existing parent-domain cookie. This occurs in versions prior to 3.14.4 . A user interacting with an untrusted subdomain could have host-onl...
CVE-2026-111749 AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, althoug...
CVE-2026-111749 AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, althoug...
CVE-2026-111749
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, althoug...
CVE-2026-111748
The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to a security logic flaw in versions prior to 3.14.4 . An attacker can send an absolute-form request that forces the Request.scheme attribute to use attacker-controlled request-target scheme data instead of...
CVE-2026-111748 AIOHTTP: Absolute-form request targets can spoof Request.scheme
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme...
CVE-2026-111748 AIOHTTP: Absolute-form request targets can spoof Request.scheme
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme...
CVE-2026-111748
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme...
CVE-2026-111748 AIOHTTP: Absolute-form request targets can spoof Request.scheme
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme...
RSC-Detect-CVE-2025-55182
🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...
ATEAM
ATEAM: Azure Tenant Enumeration and Attribution Module A Python reconnaissance tool designed to discover Azure services and attribute tenant ownership information based on their responses. Author, Contributors, and License Authors: Karl Fosaaen @kfosaaen - On most platforms, NetSPI Thomas Elling...
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
Summary Mercury turns Jupyter notebooks into shared web apps/dashboards. The mr.Markdown widget converts its input to HTML with python-markdown and no sanitization step. MarkdownWidget is an ipywidgets.HTML widget, whose value is written to the page as raw HTML via innerHTML with no sanitization,...
Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
Summary A missing comma in mercuryapp/blockhandler.py's BLOCKEDPATTERNS list causes the blocklist to fail to cover the /api/terminals endpoint. As a result, any unauthenticated attacker can spawn a full, interactive OS-level shell on the host running Mercury. Details The blocklist in...
GHSA-F8C7-RWF9-FMGM Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
Summary A missing comma in mercuryapp/blockhandler.py's BLOCKEDPATTERNS list causes the blocklist to fail to cover the /api/terminals endpoint. As a result, any unauthenticated attacker can spawn a full, interactive OS-level shell on the host running Mercury. Details The blocklist in...
CVE-2026-111066
The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to file descriptor exhaustion in versions 2.0.0 through 3.14.4. The root cause lies in multipart request processing , which can retain an unbounded number of open file descriptors. An unauthenticated attack...