Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2026/02/26 12:24 a.m.1 views

SUSE CVE-2026-27590

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because...

9.8CVSS6AI score0.00542EPSS
Exploits1References4
OSV
OSV
added 2026/02/24 5:29 p.m.4 views

UBUNTU-CVE-2026-27590

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because...

9.8CVSS7.5AI score0.00542EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/24 4:33 p.m.20 views

CVE-2026-27590 Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because...

9.3CVSS0.00542EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/24 4:33 p.m.8 views

CVE-2026-27590

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because...

9.3CVSS5.9AI score0.00542EPSS
Exploits1References4Affected Software1
Gitee
Gitee
added 2020/06/02 11:19 a.m.14 views

Exploit for Out-of-bounds Write in Php

This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the vulnerable configuration is present. The exploit targets PHP 7+ and works by appending a specially...

9.8CVSS7.4AI score0.9947EPSS
Exploits54
Gitee
Gitee
added 2020/03/28 4:30 p.m.11 views

Exploit for Out-of-bounds Write in Php

This is an exploit for a bug in php-fpm CVE-2019-11043. The bug allows a web user to execute code on a vulnerable server if the server has a specific configuration. The exploit is written in Go and uses the Cobra framework. The exploit works by setting a PHP setting using the SetSetting function,...

9.8CVSS7.5AI score0.9947EPSS
Exploits54
Rows per page
Query Builder