4057 matches found
CVE-2021-40346
CVE-2021-40346: HAProxy HTTP ์์ฒญ ์ค๋จธ๊ธ๋ง - ACL ์ฐํ ๊ฐ์ ์ด ํ๋ก์ ํธ๋ HAProxy์ ์ค์ํ ์ ์ ์ค๋ฒํ๋ก ์ทจ์ฝ์ ์ธ CVE-2021-40346 ์ ์์ฐํ๋ฉฐ, ์ด ์ทจ์ฝ์ ์ ํตํด HTTP ์์ฒญ ์ค๋จธ๊ธ๋ง ๊ณต๊ฒฉ์ผ๋ก ๋ณด์ ์ ์ด๋ฅผ ์ฐํํ ์ ์์ต๋๋ค. CVSSv3 ์ ์: 7.5 ๋์ ๊ธฐ์ฌ์: 1. Boian Eduard 2. Borsos Matheas-Roland CVE-2021-40346์ด๋? CVE-2021-40346์ HAProxy์ HTTP ํค๋ ํ์ฑ ๋ก์ง์์ ๋ฐ์ํ๋ ์ ์ ์ค๋ฒํ๋ก ์ทจ์ฝ์ ์ ๋๋ค...
SAPGateBreaker-Exploit
CVE-2022-22536: SAP์ ์๋ฌธ์ ํตํ HTTP ์ค๋ง๊ธ๋ง SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 ๋ฐ SAP Web Dispatcher๋ ์์ฒญ ์ค๋ง๊ธ๋ง ๋ฐ ์์ฒญ ์ฐ๊ฒฐ์ ์ทจ์ฝํฉ๋๋ค. ์ธ์ฆ๋์ง ์์ ๊ณต๊ฒฉ์๋ ํผํด์์ ์์ฒญ ์์ ์์์ ๋ฐ์ดํฐ๋ฅผ ์ถ๊ฐํ ์ ์์ต๋๋ค. ์ด๋ฌํ ๋ฐฉ์์ผ๋ก ๊ณต๊ฒฉ์๋ ํผํด์๋ฅผ ๊ฐ์ฅํ์ฌ ๊ธฐ๋ฅ์ ์คํํ๊ฑฐ๋ ์ค๊ฐ ์น ์บ์๋ฅผ ์ค์ผ์ํฌ ์...
CVE-2021-40346
CVE-2021-40346 โ HAProxy Integer Overflow leading to HTTP Request Smuggling ์ทจ์ฝ์ ์์ฝ HAProxy๋ ์คํ์์ค ๊ธฐ๋ฐ ๋ฆฌ๋ฒ์ค ํ๋ก์ ๊ฒธ ๋ก๋ ๋ฐธ๋ฐ์๋ก, ๋ถํ ๋ถ์ฐ ๋ฐ ACL์ ๊ทผ ์ ์ด ๊ท์น ์ฒ๋ฆฌ ๋ฑ์ ๋ด๋นํ๋ ์ํํธ์จ์ด์ CVE-2021-40346์ HAProxy๊ฐ HTTP ํค๋๋ฅผ ๋ด๋ถ HTX ํฌ๋งท์ผ๋ก ์ ์ฅํ๋ htxaddheader ํจ์์์ ํค๋ ์ด๋ฆHeader Name์ ๊ธธ์ด๋ฅผ ๊ฒ์ฆํ์ง ์๋ ๊ณผ์ ์์ ๋ฐ์ํ๋ ์ ๊ทผ ์ ์ด ์ฐํACL Bypass ์ทจ์ฝ์ ์ด ์ทจ์ฝ์ ์...
CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...
DEBIAN-CVE-2026-93562
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls ...
CVE-2026-11722
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11710
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-11548
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-93562
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls ...
EUVD-2026-83386
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls ...
CVE-2026-93574
A flaw was found in Netty's netty-codec-http component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an...
CVE-2026-93574
CVE-2026-93574 affects Netty's netty-codec-http component, where an incorrect parsing of HTTP/1.1 chunk-size tokens containing post-digit whitespace enables HTTP request smuggling . A remote attacker with no privileges can exploit this over the network to bypass security controls or access unauth...
EUVD-2026-83385
A flaw was found in Netty's netty-codec-http component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an...
EUVD-2026-83290
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11722 Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11722
CVE-2026-11722 is an HTTP request smuggling vulnerability (CWE-444) affecting IBM WebSphere Application Server (versions 8.5 and 9.0) and WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8). The vulnerability requires no authentication and has high attack complexity, with lo...
EUVD-2026-83287
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-11710 IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-11710
IBM WebSphere Application Server 8.5 (versions 8.5.5.0 through 8.5.5.30) is vulnerable to HTTP request smuggling caused by improper handling of Content-Length headers (CWE-444). The flaw allows an attacker to send crafted requests that are interpreted differently by the server versus downstream c...