CVE-2026-40859

camel-netty-http / camel-vertx-http Reproducteur de désérialisation non sécurisée de réponse HTTP CVE-2026-40859 Ce projet démontre une vulnérabilité de désérialisation Java dans les composants camel-netty-http et camel-vertx-http d'Apache Camel, suivie sous le nom CVE-2026-40859. Lorsqu'un point...

rapid-reset-check

Rapid Reset Check rapid-reset-check는 HTTP/2를 노출하므로 CVE-2023-44487 완화 검토가 필요한 HTTPS 엔드포인트를 신속하게 인벤토리화하는 작은 Go CLI 도구입니다. 이 스캐너는 의도적으로 악용을 수행하지 않습니다. 각 대상을 해석하고, 인증서가 검증된 TLS 연결을 연 다음, ALPN을 통해 h2와 http/1.1을 제안하고, 상대방peer이 선택한 것을 기록한 뒤 연결을 닫습니다. HTTP 요청, HTTP/2 연결 프리페이스preface, 스트림, RSTSTREAM 프레임 또...

CVE-2025-5349-Scanner

CVE-2025-5349 Сканер уязвимостей Использование python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...

CVE-2026-46588

camel-couchdb Воспроизведение инъекции заголовков CouchDb CVE-2026-46588 Этот проект демонстрирует инъекцию заголовков сообщений в компоненте Apache Camel camel-couchdb, отслеживаемую как CVE-2026-46588. Компонент считывает несколько заголовков Exchange для управления своим поведением —...

CVE-2021-41773h

CVE-2021-41773 Уязвимость обхода пути и раскрытия файлов в Apache HTTP Server 2.4.49 CVE-2021-41773 Информация В изменении, внесённом в нормализацию путей в Apache HTTP Server 2.4.49, была обнаружена ошибка. Злоумышленник мог использовать атаку обхода пути, чтобы сопоставлять URL с файлами за...

CVE-2025-69219

CVE-2025-69219 — Exécution de code à distance RCE via désérialisation Pickle non sécurisée dans Apache Airflow Providers HTTP Sévérité : Élevée CVSS 3.1 : 8.8 Vecteur : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE : CWE-913 — Contrôle inadéquat des ressources de code gérées dynamiquement Versions...

Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware Web Services versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

CVE-2021-41773-PoC

CVE-2021-41773 Уязвимость обхода пути и раскрытия файлов в Apache HTTP Server 2.4.49 Этот скрипт проверяет Apache HTTP Server 2.4.49 Использование: CVE-2021-41773.py параметры Только для одного IP-адреса: python CVE-2021-41773.py IPaddress Опция -f для списка IP-адресов в файле Пример: python...

CVE-2024-27316

CVE-2024-27316 J'ai décidé d'appeler cette vulnérabilité spécifiquement "CVE-2024-27316" puisque je l'ai testée contre cette vulnérabilité. Le défaut sous-jacent affecte d'autres CVE, donc j'ai pensé mentionner celles-ci dans l'espoir que d'autres puissent tester et modifier ce PoC : Ce PoC ne...

CVE-2026-42530

🛡️ CVE-2026-42530 - Vulnérabilité Use-After-Free dans NGINX HTTP/3 QUIC Use-After-Free de haute sévérité dans NGINX HTTP/3 QUIC ⚠️ Vulnérabilité du flux encodeur QPACK 🔍 Aperçu CVE-2026-42530 est une vulnérabilité use-after-free dans le module ngxhttpv3module de NGINX. Un attaquant distant non...

httpd-2.4.49

httpd-2.4.49 critique: Traversée de chemin et exécution de code à distance dans le serveur HTTP Apache 2.4.49 et 2.4.50 correctif incomplet de CVE-2021-41773 CVE-2021-42013...

CLEANSTART-2026-XZ10656 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...

CLEANSTART-2026-EL31068 Uncontrolled Resource Consumption vulnerability in the HTTP/1

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...

CLEANSTART-2026-XT16211 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33)

Security vulnerability affects the sonarqube package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33...

CLEANSTART-2026-MJ80474 client may issue specially crafted HTTP/1

Security vulnerability affects the trino package. A client may issue specially crafted HTTP/1...

CLEANSTART-2026-IL95812 urllib3 is an HTTP client library for Python

CVE-2026-97689 affects multiple packages. urllib3 is an HTTP client library for Python. See references for individual vulnerability details...

CLEANSTART-2026-VB00141 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface

Security vulnerability affects the temporal-server package. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...

CLEANSTART-2026-KT14793 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

Security vulnerability affects the temporal-server package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

CLEANSTART-2026-XK97843 HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023

Security vulnerability affects the go package. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...