servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" pre-auth crash Root-cause analysis + DoS proof-of-concept. The public advisory classifies this as an unauthenticated denial-of-service / uncontrolled resource consumption. Binary analysis shows the underlying defect is memory-safety :...

Imperva_gzip_bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

Imperva_gzip_WAF_Bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

SolarWinds Serv-U - Denial of Service

SolarWinds Serv-U contains a denial of service vulnerability caused by specially crafted POST requests with Content-Encoding: deflate, letting unauthenticated attackers crash the Serv-U service, exploit requires no authentication. id: CVE-2026-28318 info: name: SolarWinds Serv-U - Denial of Servi...

EulerOS Virtualization 2.15.0 : python-pip (EulerOS-SA-2026-4614)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in...

CVE-2026-65059

Furl versions before 3.16 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059

Furl versions before 3.16 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

UBUNTU-CVE-2026-65059

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

EUVD-2026-115332

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

PT-2026-135541

Name of the Vulnerable Software and Affected Versions Furl versions prior to 3.16 Description Furl for Perl allows memory exhaustion due to unbounded decompression of HTTP responses. The software inflates response bodies sent with gzip, x-gzip, or deflate Content-Encoding and appends the output t...

CVE-2026-113429

Legacy v1 to v3 Actions artifact uploads stored the request's Content-Encoding header unchecked in the column that is served as the artifact's Content-Type on download, and a value starting with video/ or audio/ also removed the sandboxing Content-Security-Policy. A user who can run an Actions jo...

CVE-2026-113429 Gitea stored XSS through legacy Actions artifact Content-Encoding

Legacy v1 to v3 Actions artifact uploads stored the request's Content-Encoding header unchecked in the column that is served as the artifact's Content-Type on download, and a value starting with video/ or audio/ also removed the sandboxing Content-Security-Policy. A user who can run an Actions jo...

CVE-2026-113429

The Gitea platform (versions prior to v28.3.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper validation of the Content-Encoding header during legacy (v1 to v3) Actions artifact uploads. The system stores this unchecked header in the column served as the Content-Type during d...

EUVD-2026-114792

Legacy v1 to v3 Actions artifact uploads stored the request's Content-Encoding header unchecked in the column that is served as the artifact's Content-Type on download, and a value starting with video/ or audio/ also removed the sandboxing Content-Security-Policy. A user who can run an Actions jo...

CVE-2026-113429 Gitea stored XSS through legacy Actions artifact Content-Encoding

Legacy v1 to v3 Actions artifact uploads stored the request's Content-Encoding header unchecked in the column that is served as the artifact's Content-Type on download, and a value starting with video/ or audio/ also removed the sandboxing Content-Security-Policy. A user who can run an Actions jo...

CVE-2026-113429: Gitea: Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that…

Legacy v1 to v3 Actions artifact uploads stored the request's Content-Encoding header unchecked in the column that is served as the artifact's Content-Type on download, and a value starting with video/ or audio/ also removed the sandboxing Content-Security-Policy. A user who can run an Actions jo...

PT-2026-134868

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Legacy Actions artifact uploads store the Content-Encoding header without validation in the column used as the Content-Type during download. If the value starts with video/ or audio/, the...

CLEANSTART-2026-GI03185 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the druid-fips package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...