Lucene search
+L

326 matches found

NVD
NVD
added 2026/09/15 8:17 p.m.1 views

CVE-2026-69218

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSHPROMISE frame without ENDHEADERS, H2Connection buffers the header block and subsequent CONTINUATION fragments without a size bound. A remote peer can keep an incomplete bloc...

7.5CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/15 8:00 p.m.4 views

EUVD-2026-79183

Http4s Ember HTTP/2 has an unbounded outbound frame queue...

7.5CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/15 7:54 p.m.3 views

EUVD-2026-79289

Http4s: DigestAuth nonce map grows unbounded...

7.5CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/15 7:53 p.m.3 views

EUVD-2026-79194

Http4s Ember HTTP/2 does not enforce SETTINGSMAXCONCURRENTSTREAMS...

7.5CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/15 7:25 p.m.3 views

CVE-2026-69202 Http4s Ember HTTP/2: unbounded inbound body buffering

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel. A hostile peer can...

7.5CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/15 7:25 p.m.5 views

CVE-2026-69202

Http4s is a Scala HTTP services library. In versions prior to 0.23.35 and 1.0.0-M47 , Ember's HTTP/2 flow-control window is replenished based on bytes received from the network rather than bytes consumed by the application, and each stream stores DATA in an unbounded channel . A remote peer can t...

7.5CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/15 7:22 p.m.5 views

CVE-2026-69218

Http4s Ember HTTP/2 is vulnerable to unbounded continuation frame accumulation in its H2Connection component. When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame without END_HEADERS, it buffers the header block and subsequent CONTINUATION fragments without a size bound . A remote peer can...

7.5CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/15 7:21 p.m.4 views

CVE-2026-69203

Http4s is a Scala HTTP service library. Prior to versions 0.23.35 and 1.0.0-M47 , its Ember server with HTTP/2 enabled via withHttp2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS for peer-created streams. A single unauthenticated connection can open an unbounded number of streams, each retaini...

7.5CVSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/09/15 7:21 p.m.3 views

CVE-2026-69203 Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...

7.5CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/15 7:21 p.m.3 views

CVE-2026-69203 Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...

7.5CVSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 7:17 p.m.3 views

CVE-2026-69213

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames through one unbounded queue consumed by writeLoop. When the peer stops reading, an unauthenticated HTTP/2 client can continue sending PING, SETTINGS, or DATA frames that cause...

7.5CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 5:06 a.m.4 views

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533 の Apache ActiveMQ 向けエクスプロイト CVE-2025-27533 の PoC エクスプロイトです。Apache ActiveMQ におけるサービス拒否 DoS 脆弱性です。このツールは悪意のある OpenWire パケットを送信して、対象サーバーの JVM ヒープメモリを枯渇させ、ポート 61616 の ActiveMQ サービスを潜在的にクラッシュさせます。 使用法 root@kitploit: python CVE-2025-27533Exploit.py --host --port 61616 --total-packets 200...

7.5CVSS7AI score0.0866EPSS
SaveExploits2
NVD
NVD
added 2026/09/14 6:17 p.m.5 views

CVE-2026-53659

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.GunZip, and the underlying Gzip request-body decompression functions impose no limit on decompressed size. An unauthenticated client can send a small...

7.5CVSS0.00441EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/14 5:29 p.m.6 views

EUVD-2026-77694

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.GunZip, and the underlying Gzip request-body decompression functions impose no limit on decompressed size. An unauthenticated client can send a small...

7.5CVSS0.00441EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/14 4:09 p.m.28 views

CVE-2026-54156

node-opcua (an OPC UA implementation for TypeScript/Node.js) versions >=2.1.9 through

7.5CVSS0.00548EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/14 4:09 p.m.28 views

CVE-2026-54156 node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global galreadyUsedNonce cache used by nonceAlreadyBeenUsed in packages/node-opcua-secure-channel/source/server/serversecurechannellayer.ts records nonces from OpenSecureChannelRequest and CreateSessi...

7.5CVSS0.00548EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/14 2:00 p.m.6 views

EUVD-2026-77488

Description The DRPC server kept a map from function name to request queue and created an entry the first time a function name was seen. No code path ever removed an entry: request cleanup removed the request from its queue, and the shutdown path drained queues, but the queue object and its map...

9.8CVSS0.00516EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.9 views

PT-2026-91234

Description The DRPC server kept a map from function name to request queue and created an entry the first time a function name was seen. No code path ever removed an entry: request cleanup removed the request from its queue, and the shutdown path drained queues, but the queue object and its map...

9.8CVSS0.00516EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.8 views

PT-2026-91203

filebrowser through 2.63.23 fails to limit WebSocket message size in the /api/command handler before checking permissions, allowing authenticated users to buffer arbitrarily large messages. Attackers can send oversized WebSocket messages to exhaust server heap memory and cause denial of service...

7.1CVSS0.00249EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.9 views

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21801-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21801-1 advisory. - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates bsc1258543....

9.8CVSS6.2AI score0.00685EPSS
SaveExploits2References28
Rows per page
Query Builder