Linux Distros Unpatched Vulnerability : CVE-2026-63452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser...

DEBIAN-CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

UBUNTU-CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-63452 Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-63452 Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

EUVD-2026-83390

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-63452: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

PT-2026-95658

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5 Description The HTTP/1 parser limits decompression work per transaction but fails to limit the number of small brotli compression bombs a single flow can submit. When the response-body-decompress-layer-lim...

MAL-2024-10701 Malicious code in htp-https (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2627fae79f21d1e7b7ad7f9e9ebca90c821733e520f78eb372c1ca2bd247bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htp-https (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2627fae79f21d1e7b7ad7f9e9ebca90c821733e520f78eb372c1ca2bd247bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in htp-https

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2021-27900

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving htp connp RES FINALIZE and htp connp res data in the fuzz htp.c file. No...

PT-2020-22286

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the crc32 function, which is called by htp gzip decompress...

PT-2020-22338

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs during the decompression process. The crash state indicates the involvement of specific...

PT-2020-22041

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 1 crash type. The crash state includes functions such as htp connp is line terminator, htp connp REQ...

PT-2019-8749

Name of the Vulnerable Software and Affected Versions LibHTP version 0.5.26 Description The issue allows remote attackers to cause a heap-based buffer over-read via an authorization digest header. This is related to the htp parse authorization digest function in htp parsers.c. Recommendations For...

ColdFusion 9-10 - Credential Disclosure Exploit

No description provided by source. !/usr/bin/env python -- coding: utf-8 -- intro= Cold ,''' Fusion || | | \ / | Cold ,''' /-- Fusion | | | | / |. Cold -,,' Fusion Name : ColdSub-Zero.pyFusion v2 Description : CF9-10 Remote Root Zeroday Crew : HTP cyan = \x1b1;36m red = \x1b1;31m clear = \x1b0m...