Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003826 advisory. If LimitXMLRequestBody is set to allow request bodies larger than 350MB defaults to 1M on 32 bit systems an integer overflow happens which later causes out of bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090455 advisory. In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirec...

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-3868)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2026-3834)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

Exploit for Out-of-bounds Write in Apache Http_Server

CVE-2021-44790 Lab This repository contains a small local lab...

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-3695)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem leads to CWE-12...

EulerOS Virtualization 2.12.0 : httpd (EulerOS-SA-2026-3643)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

EulerOS 2.0 SP10 : mod_http2 (EulerOS-SA-2026-3752)

According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP requests...

EulerOS 2.0 SP15 : httpd (EulerOS-SA-2026-3781)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.x000D Users are recommended to...

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-3742)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem leads to CWE-12...

EulerOS Virtualization 2.12.0 : mod_http2 (EulerOS-SA-2026-3652)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...

EulerOS Virtualization 2.11.1 : mod_http2 (EulerOS-SA-2026-3441)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In certain proxy configurations, a denial of service attack againstApache HTTP Server versions 2.4.26 through to 2.4.63 can be...

[SECURITY] [DSA 6504-1] libapache2-mod-auth-openidc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6504-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 17, 2026 https://www.debian.org/security/faq -...

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

Summary An unauthenticated remote attacker can leak one entry per HTTP request out of the in-memory session table of LocalSessionManager by sending a well-formed JSON-RPC POST that is not an InitializeRequest. The Streamable HTTP server's handlepost allocates the session before it validates the...

CVE-2026-63128

A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. An unauthenticated remote attacker can send specially crafted JSON-RPC POST requests to the stateful Streamable HTTP server. These requests cause the server to create and permanently retain session and channel state without prop...

CVE-2026-63128 RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamablehttpserver/tower.rs allows an unauthenticated client to send a well-formed JSON-RPC POST that is not an initialization request, or a...

CVE-2026-63128

RMCP , the official Rust SDK for the Model Context Protocol, has an unauthenticated denial-of-service vulnerability in its stateful Streamable HTTP server (crates/rmcp/src/transport/streamable_http_server/tower.rs). Prior to version 2.0.0 , StreamableHttpService::handle_post calls LocalSessionMan...

CVE-2026-63128 RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamablehttpserver/tower.rs allows an unauthenticated client to send a well-formed JSON-RPC POST that is not an initialization request, or a...

Exploit for Improper Handling of Highly Compressed Data (Data Amplification) in Apache Http_Server

!Go Versionhttps://img.shields.io/badge/Go-1.26%2B-00ADD8?lo...

The vulnerability of the Apache Plugin component of the Oracle HTTP Server allows a hacker to gain full control over the server.

The vulnerability of the Apache Plugin component of the Oracle HTTP Server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the server using the HTTPS protocol...