flounder

configs/ - perfiles de contexto opcionales Estos archivos JSON son perfiles de contexto opcionales y sin respuestas predefinidas. No son modos del producto Flounder y no se cargan por defecto. Existen para casos en los que un operador desea deliberadamente proporcionar al modelo un marco familiar...

Http11Probe

Http11Probe Http11Probe es un comprobador de cumplimiento y seguridad para servidores HTTP/1.1. Envía peticiones malformadas, ambiguas y de gran tamaño a un servidor a través de sockets TCP sin procesar y verifica cómo responde en comparación con lo que realmente exigen los RFC 9110 y RFC 9112...

heartbleed-lab

Laboratorio Heartbleed Laboratorio educativo para estudiar la vulnerabilidad Heartbleed CVE-2014-0160 usando un entorno OpenSSL vulnerable real dentro de Docker. Este proyecto reproduce un servidor TLS vulnerable usando OpenSSL 1.0.1f e implementa un cliente TLS heartbeat crudo y personalizado pa...

CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

Aviso de Seguridad: Contrabando de peticiones HTTP mediante valores Transfer-Encoding no analizados tinyhttp ID de CVE asignado: CVE-2026-66752 Resumen tinyhttp solo comprueba si hay una cabecera Transfer-Encoding. Nunca examina su valor. Cualquier valor, incluidos codings que no son chunked y...

mongobleed

Laboratorio de Fuga de Compresión de MongoDB Seguro, Educativo CVE de referencia : CVE-2025-14847 Este repositorio es un laboratorio educativo que demuestra el concepto detrás de una clase de problemas a menudo descritos como “compression framing / divulgación de memoria por metadatos de tamaño” ...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

Laboratorio Práctico CVE-2022-24903 Autor: Andrew Beshay Mousa Un laboratorio práctico que demuestra la vulnerabilidad de desbordamiento de búfer en el montón de rsyslog. Un entorno de laboratorio práctico para reproducir y comprender la vulnerabilidad de desbordamiento de búfer en el montón de...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary and the Mint client on a pooled connection, poisoning the responses to subsequent requests that share the connection...

CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary and the Mint client on a pooled connection, poisoning the responses to subsequent requests that share the connection...

CVE-2026-94194

The elixir-mint library (versions 0.1.0 to 1.11.0 ) is vulnerable to HTTP Request/Response Smuggling due to the inconsistent interpretation of HTTP/1 framing. Specifically, the message_body/1 function in lib/mint/http1.ex incorrectly applies chunked framing when chunked is the first coding listed...

CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary and the Mint client on a pooled connection, poisoning the responses to subsequent requests that share the connection...

Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879,...

Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

HTTP Request Smuggling

Http4s is vulnerable to HTTP Request Smuggling. The vulnerability is due to inconsistent HTTP message body framing between Ember and an intermediary when both headers are present, which allows an attacker to smuggle a second request, bypass access controls, poison caches, or cause a victim reques...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through ExtractHttpBodyOptionally in filters/openpolicyagent/openpolicyagent.go and AdaptToExtAuthRequest in filters/openpolicyagent/internal/envoy/skipperadapter.go. An attacker can get an oversized request body...

Oracle Linux 10 : rsyslog (ELSA-2026-67584)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67584 advisory. 8.2510.0-5.1 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 Tenable has extracted the preceding description...

Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE

Summary An unauthenticated peer can make Ember's HTTP/2 read loop hold 16 MiB of a single frame in memory on a connection where Ember advertised a 16 KiB limit. The declared length is readable from the frame's first 9 bytes, but it is not compared against SETTINGSMAXFRAMESIZE until the whole...

Http4s: Ember chunk parser lenience (TE.TE request smuggling)

Summary Ember's chunk decoder parses the size token leniently: it strips leading and trailing whitespace and accepts a leading + or - sign. RFC9112 §7.1 defines chunk-size = 1HEXDIG. An intermediary that parses the chunk boundary differently or rejects it will disagree with Ember on request...

Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

Summary Ember's HTTP/1.1 request parser does not reject a message that carries both a Transfer-Encoding and a Content-Length header. RFC 9112 §6.1 requires a server to treat such a message as a framing error and close the connection. An intermediary that follows the RFC's CL-strip-and-forward pat...

GHSA-8H4C-X2WG-6XP8 Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

Summary Ember's HTTP/1.1 request parser does not reject a message that carries both a Transfer-Encoding and a Content-Length header. RFC 9112 §6.1 requires a server to treat such a message as a framing error and close the connection. An intermediary that follows the RFC's CL-strip-and-forward pat...