dotnetfile

dotnetfile dotnetfile 是一个用 Python 编写的用于解析 Windows .NET 文件公共语言运行时 CLR 头文件的库。CLR 头存在于每个 Windows .NET 程序集中，位于可移植可执行文件 PE 头旁边。它为文件的管理代码部分存储了大量元数据信息。 dotnetfile 在某种程度上相当于 pefile，但面向 .NET 样本。 该库提供了一个易于使用的 API，同时也尝试贡献新方法来改进文件检测。这包括 MemberRef 哈希（实验性）以及 TypeRef 哈希的原始版本和修改版本。 该项目的目标是为恶意软件分析师和威胁猎人提供一种工具，以便轻...

CVE-2025-48799-

CVE-2025-48799 – Apache Tomcat 远程代码执行（PoC） 本仓库包含针对 CVE-2025-48799 的概念验证漏洞利用代码，该漏洞是 Apache Tomcat 9.0.48 中发现的一个远程代码执行漏洞。该缺陷源于 HTTP 头解析器中的整数溢出，可通过精心构造的 X-Forwarded 头触发。 目的 本项目仅用于教育和研究目的。它展示了： 畸形 HTTP 头如何导致内存破坏 构造 shellcode 和计算缓冲区偏移量的技术 在受控环境中利用现实世界中已修复 CVE 的实践示例 工作原理 该漏洞利用程序： 1. 构造一个超大的 X-Forwarded...

Linux Distros Unpatched Vulnerability : CVE-2026-68005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

DEBIAN-CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

CVE-2026-68005

ACME mini_httpd versions 1.30 and prior are vulnerable to a remote denial of service via the HTTP request header parser in the handle_request() function. The vulnerability requires no authentication and can be triggered over the network with low complexity (CVSS 3.1: 7.5 HIGH ). CISA SSVC assesse...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

EUVD-2026-60449

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

CVE-2026-66062

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the content negotiation header parser used by SvelteKit's request handling for headers such as Accept uses a regular expression vulnerable to quadratic backtracking, so a maliciously...

EUVD-2026-54557

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the content negotiation header parser used by SvelteKit's request handling for headers such as Accept uses a regular expression vulnerable to quadratic backtracking, so a maliciously...

CVE-2026-71190

In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...

CVE-2026-14899

The CVE-2026-14899 issue is a memory-safe vulnerability in Thunderbird’s MIME header parser when forwarding messages with headers visible. An off-by-one error could allow reading a byte beyond the header buffer, potentially causing a crash. Affected component: Thunderbird MIME header parsing duri...

KLA91170 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

CVE-2026-63734

SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by uploading a malformed .surml file to the /ml/import endpoint. Attackers can supply non-numeric input-dimensions or other...

CVE-2026-63734

SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by uploading a malformed .surml file to the /ml/import endpoint. Attackers can supply non-numeric input-dimensions or other...

CVE-2026-63734 SurrealDB before 3.2.0 Denial of Service via malformed SurrealML import

SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by uploading a malformed .surml file to the /ml/import endpoint. Attackers can supply non-numeric input-dimensions or other...

PT-2026-61550

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.2.0 Description A denial of service issue exists in the SurrealML header parser. Authenticated users with the Owner role can crash the server by uploading a malformed .surml file to the '/ml/import' endpoint. By...