CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

EUVD-2026-92264

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245

The sgl-project sglang library (up to version 0.5.21 ) contains a vulnerability in the HTTP Endpoint component, specifically within the server_info function of the python/sglang/srt/entrypoints/http_server.py file. Manipulation of the api_key argument can result in the cleartext transmission of s...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

Important: Red Hat Security Advisory: mod_auth_openidc security update

An update for modauthopenidc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

mod_auth_openidc: mod_auth_openidc: Denial of Service via malformed state cookie parsing

A flaw was found in modauthopenidc, an OpenID Connect Relying Party module for Apache HTTP servers. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request with a malformed state cookie. This can lead to an out-of-bounds read and a one-byte out-of-bounds write...

CVE-2022-21907-Vulnerability-PoC

CVE-2022-21907 الوصف - POC لـ CVE-2022-21907: ثغرة تنفيذ التعليمات البرمجية عن بعد في مكدس بروتوكول HTTP. - تم إنشاؤه بواسطة antx في 2022-01-17، مع بعض الإصلاحات الصغيرة بواسطة Michele "[email protected]" التفاصيل - ثغرة تنفيذ التعليمات البرمجية عن بعد في مكدس بروتوكول HTTP. - مشابهة لـ...

rapidresetclient

Client de réinitialisation rapide Rapid Reset Client est un outil pour tester les mesures de protection et l'exposition à CVE-2023-44487 vecteur d'attaque DDoS Rapid Reset. Il implémente un client HTTP/2 minimaliste qui ouvre un seul socket TCP, négocie TLS, ignore le certificat, et échange des...

CVE-2023-27163-exploit

CVE-2023-27163 — SSRF-эксплойт для request-baskets Я написал этот эксплойт для использования CVE-2023-27163 — уязвимости подделки серверных запросов SSRF, обнаруженной в request-baskets версии ≤ 1.2.1. Ошибка находится в конечной точке /api/baskets/name, где параметр forwardurl позволяет...

Malicious code in aria-live-region-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391a9a163273e36e3945f918ea720b8e10aa462b0aa603d4012b28c557c58570 The package is advertised as an ARIA accessibility helper but ships thunderboltRegistry.js, which executes a top-level IIFE on module load. The IIFE...

MAL-2026-17557 Malicious code in css-svqggc-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b23cf39720388bcf9f26621bd52e256e18a011bf3b6821b7d9f5f60115b9663 Package masquerades as a CSS polyfill while impersonating internal Wix Thunderbolt registry modules thunderboltRegistry, siteAssetsRegistry,...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Exploit de traversée de chemin et d'exécution de code à distance RCE version corrigée Description Ceci est un exploit pour la vulnérabilité du serveur Apache HTTP 2.4.49 identifiée comme CVE-2021-41773. La version originale de l'exploit publiée sur Exploit-DB contenait...

nosurf-cve-2025-46721

CVE-2025-46721: ثغرة CSRF بسبب فشل عمليات التحقق من نفس المصدر في justinas/nosurf ماذا حدث؟ هل أنا متأثر؟ إثبات المفهوم التصحيح الشكر والتقدير ماذا حدث؟ جميع إصدارات nosurf قبل 1.2.0 فشلت في تطبيق عمليات التحقق من نفس المصدر same-origin checks للطلبات الواردة. حدث هذا بسبب الاعتماد على الحقل...

bifrost

Bifrost Serveur proxy HTTP/HTTPS/SOCKS5 haute performance Language: 中文 | English · Documentation site Bifrost est un serveur proxy haute performance, adapté à l'IA, écrit en Rust, inspiré de Whistle. Il offre des capacités d'interception de requêtes, de modification par règles, d'interception TLS...

cve-2021-41773

CVE-2021-41773 – تقرير Apache Path Traversal ملخص ثغرة تم اكتشافها في Apache HTTP Server 2.4.49، والتي يمكن أن تؤدي إلى كشف ملفات حساسة في النظام عبر هجوم Path Traversal وفقًا لإعدادات خادم الويب. Path Traversal: يمكن للمهاجم استخدام مسارات تحتوي على ../ للوصول إلى ملفات خارج جذر الويب. معلومات ا...

CVE-2022-21371

CVE-2022-21371 Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Inclusion de fichier local Exploit Title: Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu Vendor Homepage:...

CVE-2023-44487

CVE-2023-44487 — Laboratoire de test de la réinitialisation rapide HTTP/2 Environnement pédagogique pour le devoir 4 de LTAT.04.022. Quatre conteneurs vous permettent d'analyser et de comparer des configurations vulnérables et corrigées. Tableau des ports Conteneur| Port| Logiciel| Statut...

CVE-2023-5044

CVE-2023-5044 إثبات المفهوم لـ CVE 2023 5044 المتطلبات الأساسية Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 إثبات المفهوم امنح Docker الصلاحيات الصحيحة sudo usermod -aG docker $USER && newgrp docker ابدأ المجموعة cluster مع extraPortMapping و node-labels لتحضيرها لـ ingress. cat EOF | kind...

CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 Comment lancer le lab CVE-2021-41773-Path Traversal 1. Installez et lancez Docker sur votre PC/portable 2. Clonez ce dépôt GitHub 3. Accédez au dossier Path Traversal 4. Saisissez les commandes suivantes docker build -t cve-2021-41773-path-traversal . et...