dotnetfile

dotnetfile dotnetfile is a Common Language Runtime CLR header parser library for Windows .NET files built in Python. The CLR header is present in every Windows .NET assembly beside the Portable Executable PE header. It stores a plethora of metadata information for the managed part of the file...

CVE-2025-48799-

CVE-2025-48799 – Apache Tomcat Remote Code Execution PoC This repository contains a proof-of-concept exploit for CVE-2025-48799, a remote code execution vulnerability discovered in Apache Tomcat 9.0.48. The flaw stems from an integer overflow in the HTTP header parser, which can be triggered by a...

Amazon Linux 2 : python-pillow (ALAS-2026-4075)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4075 advisory. Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid...

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage;...

CVE-2026-121617

A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function initmultipart of the file /cgi-bin/uploadfw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched remotely. The exploit has been released...

CVE-2026-121617

A security flaw exists in the Linksys E5600 (version 1.1.0.26 ) within the Header Parser component. Specifically, the init_multipart function in the /cgi-bin/upload_fw.cgi file is susceptible to an out-of-bounds write via manipulation. This vulnerability can be exploited remotely to potentially i...

CVE-2026-121617 Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write

A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function initmultipart of the file /cgi-bin/uploadfw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched remotely. The exploit has been released...

[SECURITY] Fedora 44 Update: rust-astral-mail-headers-0.0.1-2.fc44

A high-performance email header parser designed for Python packaging...

SUSE CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...

Tornado: Quadratic CPU Usage When Parsing HTTP Headers With Line Folding

Summary Tornado's HTTP header parser takes quadratic time On² when a header value is continued across many "obsolete line folding" obs-fold lines. An unauthenticated attacker can send a request whose header block is mostly short continuation lines. Parsing it uses a large amount of CPU on the...

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

Summary Tornado's HTTP header parser takes quadratic time On² when a header value is continued across many "obsolete line folding" obs-fold lines. An unauthenticated attacker can send a request whose header block is mostly short continuation lines. Parsing it uses a large amount of CPU on the...

GHSA-PCG2-G6CJ-Q92C Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

Summary Tornado's HTTP header parser takes quadratic time On² when a header value is continued across many "obsolete line folding" obs-fold lines. An unauthenticated attacker can send a request whose header block is mostly short continuation lines. Parsing it uses a large amount of CPU on the...

EUVD-2026-110318

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding...

CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...

Linux Distros Unpatched Vulnerability : CVE-2026-116577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly...

CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...

AZL-111739 CVE-2026-116577 affecting package python-tornado 6.3.3-11

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...

DEBIAN-CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...

UBUNTU-CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...

CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...