CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift 漏洞工具包 全面的工具包，用于扫描、修补和测试 CVE-2026-42945 —— nginx 中的严重 RCE 漏洞 目录 概述 CVE 详情 功能特点 工具包组件 系统要求 安装 使用方法 工作流程示例 安全注意事项 故障排除 贡献 概述 本工具包提供了用于扫描、修补和测试 CVE-2026-42945 的全面工具。这是一个影响 nginx 的严重远程代码执行漏洞 ，影响主版本 1.26.3 之前以及稳定版 1.24.1 之前的版本。 该漏洞在 ASLR 被禁用时，利用堆喷射技术利用畸形 HTTP/2 头部解析。 CVE 详情...

Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

CVE-2024-39929

CVE-2024-39929 PoC Resumen de la vulnerabilidad Exim hasta la versión 4.97.1 analiza incorrectamente un nombre de archivo de cabecera RFC 2231 multilínea, lo que permite a atacantes remotos omitir el mecanismo de protección de bloqueo de extensiones $mimefilename y potencialmente entregar adjunto...

CVE-2021-40346

CVE-2021-40346：HAProxy HTTP 请求走私 - ACL 绕过 概述 本项目演示了 CVE-2021-40346 ，这是 HAProxy 中一个严重的整数溢出漏洞，可导致 HTTP 请求走私攻击，从而绕过安全控制。 CVSSv3 评分： 7.5 高 贡献者： 1. Boian Eduard 2. Borsos Matheas-Roland CVE-2021-40346 是什么？ CVE-2021-40346 是 HAProxy HTTP 头部解析逻辑中的一个整数溢出漏洞 。当头部名称超过 255 字节时，长度值会从一个 8 位字段溢出，导致 HAProxy...

email-header-analyzer

Analizador de Cabeceras de Correo Electrónico MHA ¿Qué es el Analizador de Cabeceras de Correo Electrónico MHA? El Analizador de Cabeceras de Correo Electrónico es una herramienta escrita en flask para analizar cabeceras de correo electrónico y convertirlas a un formato legible por humanos, y...

CVE-2026-74693 net: prestera: validate firmware header length

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...

EUVD-2026-64380

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...

CVE-2026-59323 Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service DoS due to unbounded object allocation when extracting incoming baggage headers. Specifically, an application is vulnerable when all the following are true: The application...

CVE-2026-59323

CVE-2026-59323 is a denial-of-service vulnerability in io.micrometer:micrometer-tracing-bridge-brave caused by unbounded object allocation when parsing W3C baggage headers. Incoming baggage entries are processed without enforcing limits on entry count or header size, leading to unconditional Bagg...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

CVE-2026-13048

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

CVE-2026-68299

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a Geneve-encapsulated packet the device can set them based on the inner header...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in Glib’s content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored as a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access...

DEBIAN-CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

EUVD-2026-54987

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

CVE-2026-19362

A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parsetokenfromheader of the file src/parsetokenfromheader.rs of the component Authorization Header Parsing. The manipulation of the argument authorizationtoken leads to denial of service. Remote...