Lucene search
+L

4475 matches found

OSV
OSV
•added 2021/11/19 12:15 p.m.•11 views

CVE-2021-41436

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56UV2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 SeriesRT-AX86U/RT-AX86S, RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 TUF-AX5400, ASUS...

7.5CVSS7.2AI score0.04952EPSS
SaveExploits0References8
NVD
NVD
•added 2021/11/19 12:15 p.m.•26 views

CVE-2021-41436

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56UV2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 SeriesRT-AX86U/RT-AX86S, RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 TUF-AX5400, ASUS...

7.8CVSS0.04952EPSS
SaveExploits0References7
Prion
Prion
•added 2021/11/19 12:15 p.m.•39 views

Design/Logic Flaw

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56UV2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 SeriesRT-AX86U/RT-AX86S, RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 TUF-AX5400, ASUS...

7.8CVSS7.6AI score0.04952EPSS
SaveExploits0References8Affected Software18
Cvelist
Cvelist
•added 2021/11/19 11:14 a.m.•37 views

CVE-2021-41436

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56UV2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 SeriesRT-AX86U/RT-AX86S, RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 TUF-AX5400, ASUS...

7.8AI score0.04952EPSS
SaveExploits0References7
CVE
CVE
•added 2021/11/19 11:14 a.m.•103 views

CVE-2021-41436

CVE-2021-41436 describes an HTTP request smuggling vulnerability in ASUS routers (e.g., ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX58U, RT-AX82U, RT-AX86U, RT-AX68U, RT-AX88U, RT-AX92U, TUF Gaming AX3000/AX5400, ZenWiFi XD6/XT8, etc.) that allows a remote unauthenticated attacker ...

7.8CVSS7.5AI score0.04952EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/19 12:00 a.m.•3 views

CVE-2021-41436: Inconsistent Interpretation of HTTP Requests

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56UV2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 SeriesRT-AX86U/RT-AX86S, RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 TUF-AX5400, ASUS...

7.8CVSS5.8AI score0.04952EPSS
SaveExploits0References16
Gitee
Gitee
•added 2021/11/18 8:27 a.m.•9 views

Web-Attack-Cheat-Sheet

It is an offensive tool for web application security testing. The repository contains a comprehensive web attack cheat sheet, covering various techniques for discovering, enumerating, scanning, and monitoring web applications. The tool covers topics such as IP and subdomain enumeration, cache and...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/11/17 12:00 a.m.•38 views

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / etc (SUSE-SU-2021:3669-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3669-1 advisory. - CVE-2021-30640: Escape parameters in JNDI Realm queries bsc1188279. - CVE-2021-33037: Process T-E header from both HTTP 1.0 and...

7.5CVSS7AI score0.74667EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
•added 2021/11/17 12:00 a.m.•71 views

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / etc (SUSE-SU-2021:3672-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3672-1 advisory. - CVE-2021-30640: Escape parameters in JNDI Realm queries bsc1188279. - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1...

7.5CVSS7AI score0.74667EPSS
SaveExploits1References10
Oracle linux
Oracle linux
•added 2021/11/16 12:00 a.m.•50 views

squid:4 security, bug fix, and enhancement update

libecap squid 7:4.15-1 - new version 4.15 - Resolves: 1964384 - squid:4 rebase to 4.15 7:4.11-5 - Resolves: 1944261 - CVE-2020-25097 squid:4/squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling...

8.6CVSS6.8AI score0.95785EPSS
SaveExploits4
OSV
OSV
•added 2021/11/15 3:15 p.m.•7 views

ALPINE-CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS7AI score0.03156EPSS
SaveExploits1References1
NVD
NVD
•added 2021/11/15 3:15 p.m.•29 views

CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS0.03156EPSS
SaveExploits1References3
OSV
OSV
•added 2021/11/15 3:15 p.m.•32 views

CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS1AI score
SaveExploits0References3
Prion
Prion
•added 2021/11/15 3:15 p.m.•37 views

Design/Logic Flaw

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.4CVSS6.6AI score0.03156EPSS
SaveExploits1References3Affected Software3
UbuntuCve
UbuntuCve
•added 2021/11/15 3:15 p.m.•44 views

CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS6.8AI score0.03156EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/11/15 2:45 p.m.•37 views

CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

7.4AI score0.03156EPSS
SaveExploits1References3
CVE
CVE
•added 2021/11/15 2:45 p.m.•456 views

CVE-2021-22959

CVE-2021-22959 relates to HTTP Request Smuggling in the llhttp parser when a space follows a header name before the colon. Affected llhttp versions are < v2.1.4 and

6.5CVSS7.1AI score0.03156EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2021/11/15 2:45 p.m.•37 views

CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS7.3AI score0.03156EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2021/11/15 2:45 p.m.•38 views

CVE-2021-22959

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS7.5AI score0.03156EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/15 12:00 a.m.•5 views

CVE-2021-22959: Inconsistent Interpretation of HTTP Requests

The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and v6.0.6...

6.5CVSS8.1AI score0.03156EPSS
SaveExploits1References3
Rows per page
Query Builder