CVE-2023-25690

CVE-2023-25690 Description de CVE-2023-25690: Certaines configurations de modproxy sur Apache HTTP Server des versions 2.4.0 à 2.4.55 permettent une attaque par HTTP Request Smuggling technique d'attaque interférant avec le traitement par le serveur web des chaînes de requêtes HTTP reçues d'un ou...

CVE-2024-40725

أداة كشف تهريب طلبات HTTP يحتوي هذا المستودع على أداة مبنية بلغة بايثون لكشف ثغرات تهريب طلبات HTTP، وتستهدف على وجه التحديد CVE-2024-40725. تحاول الأداة استغلال هذه الثغرة في خادم Apache HTTP عن طريق إرسال طلبات HTTP مصممة بعناية وتحليل استجابات الخادم. الهدف الأساسي هو تحديد الاختلافات في أكواد...

CVE-2026-78605

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2021-31188

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:42+00:00| seen| https://t.me/hackingAttack/8312 2026-09-02 01:03:18+00:00| seen| https://t.me/hackingAttack/8312...

CVE-2025-55315

CVE-2025-55315 CVE-2025-55315 .NET HTTP Request Smuggling के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट। यह दर्शाता है कि किस प्रकार अनुचित तरीके से पार्स किया गया चंक्ड एन्कोडिंग हमलावरों को कमजोर ASP.NET Core/Kestrel सर्वरों में प्रॉक्सी और लोड बैलेंसर्स के पीछे अनुरोधों को तस्करी करने देता है। 📊...

CVE-2026-78605

Elasticsearch is affected by an HTTP Request Smuggling flaw (CWE-444) that can lead to information disclosure . Under specific proxy deployment configurations, a network attacker with no prior authentication could obtain confidential responses intended for other authenticated users. The CVSS 3.1 ...

EUVD-2026-69568

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CTF-Web-Exploitation

नेथर पोर्टल डिसिंक HUUP "मैं स्थापित सड़कों पर नहीं चलता बल्कि शून्य में स्वतंत्रता से छलांग लगाता हूं। मुझे गलत पैकेज करो, और मैं एक रहस्य गलत दरवाजे पर पहुंचा दूंगा।" विवरण चुनौती में UDP पर स्तरित एक HTTP/3 QUIC एप्लिकेशन शामिल है। चूंकि UDP स्टेटलेस है और प्रॉक्सी TCP की तरह सख्त HTTP अनुरोध...

AZL-98487 CVE-2026-73276 affecting package erlang 26.2.5.21-4

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

CVE-2026-73276

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

CVE-2026-73812

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

CVE-2026-73812

Erlang/OTP inets (HTTP server module) is vulnerable to HTTP Request Smuggling (CL.TE desync) when deployed behind a Content-Length-preferring front-end proxy. The root cause is in httpd:check_header/3 , which rejects duplicate Content-Length headers but never validates the simultaneous presence o...

CVE-2026-73812 inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

CVE-2026-73276

CVE-2026-73276 is an HTTP Request Smuggling vulnerability in the inets/httpd component of Erlang/OTP , rated CVSS 4.0 8.3 (HIGH) . The root cause is that the gracefulness code in inets failed to reject headers containing whitespace before the colon , leading to header-dropping inconsistencies tha...

CVE-2026-73276 inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

EUVD-2026-69233

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

CVE-2026-66357

Erlang/OTP's inets httpd component has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines), meaning every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature enables HTTP request smuggling against servers built on this com...

CVE-2026-66357 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...

EUVD-2026-69232

httpd has never implemented obs-fold RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines. Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved. This issue...