USN-8890-1: libsoup vulnerabilities

It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-4271 It was discovered that libsoup incorrectly handled certain HTTPS...

CVE-2024-24919-POC

CVE-2024-24919-POC Un semplice strumento per automatizzare CVE-2024-24919 Esposizione di Informazioni Sensibili Caratteristiche Facile da usare. Commenti utili; può testare più domini Uso git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x CVE-2024–24919....

CVE-2025-31324

CVE-2025-31324 Come funziona questo metodo di rilevamento? Il template esegue una richiesta HTTP GET all'URL di base del target ed esamina le intestazioni della risposta per identificare le istanze di SAP NetWeaver Application Server. Queste informazioni aiutano a valutare se il sistema potrebbe...

netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both Transfer-Encoding: chunked and Content-Length headers. While Netty correctly strips the conflicting Content-Length header for HTTP/1.1 messages, thi...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

USN-8869-1: RabbitMQ Server vulnerability

It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion...

CVE-2026-54477

CVE-2026-54477: Pannello di amministrazione con header di sicurezza mancanti clickjacking / XSS Advisory Campo| Valore ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medio Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

CVE-2026-48204

CVE-2026-48204 — Iniezione di header gridfs. in camel-mongodb-gridfs Riproduttori proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel...

CLEANSTART-2026-IY13000 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the rundeck package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

[SECURITY] Fedora 45 Update: ocaml-jane-street-headers-0.17.0-13.fc45

This package contains C header files shared between various Jane Street packages...

CVE-2026-105742

A flaw was found in docling. This vulnerability can lead to information disclosure of sensitive credentials, such as API keys and session tokens. When remote image fetching is enabled, the HTML image loader fails to restrict custom request headers to the document's original domain. A remote...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Ceph vulnerability (USN-8867-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8867-1 advisory. It was discovered that the Ceph Object Gateway RGW SigV4 handler did not reject requests carrying x-amz- headers that were absent from the...

Cisco ASA Improper Neutralization of Special Elements in Output Used by a Downstream Component (CVE-2020-3561)

A vulnerability in the Clientless SSL VPN WebVPN of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The vulnerability is due to...

CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket Dispatch-Header-Injection Lauffähiger Proof-of-Concept-Reproducer für die Apache-Camel-Schwachstelle, bei der der camel-atmosphere-websocket-Producer seine WebSocket-Empfänger aus websocket.-Exchange-Headern auswählt, deren Namen außerhalb des...

CVE-2023-4281

ID CVE: CVE-2023-4281 Tipo di vulnerabilità: Spoofing dell'indirizzo IP Descrizione: Il plugin Activity Log recupera gli indirizzi IP dei client da intestazioni potenzialmente non affidabili, consentendo a un attaccante di manipolarne il valore. Questo può essere usato per nascondere l'origine de...

Insertion of Sensitive Information Into Sent Data

Overview docling-slim is a Modular version of the Docling package: SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to Insertion of Sensitive...

CVE-2026-46453

Riproduttore dell'iniezione di header senza prefisso in camel-elasticsearch-rest-client CVE-2026-46453 Questo progetto dimostra un'iniezione di header nei messaggi / bypass dell'autorizzazione nel componente camel-elasticsearch-rest-client di Apache Camel, tracciato come CVE-2026-46453. Il...

CVE-2026-46457

CVE-2026-46457 — Iniezione di header in ingresso di camel-nats SSRF Proof-of-concept eseguibili per riprodurre la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel...

CVE-2026-105742

The docling library (versions 2.95.0 through 2.132.0 ) contains a vulnerability in the HTML image resource loader located at docling/backend/utils/image_resource_loader.py. When enable_remote_fetch=True and fetch_images=True are set, the loader forwards custom headers—such as API keys and cookies...

Security Bulletin: middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags.

Summary Upgrade to InformixHQ 3.3.2 included in 14.10.14W1 and 15.0.1.16 Vulnerability Details CVEID:CVE-2026-69207 DESCRIPTION: Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a...