CVE-2026-49975

CVE-2026-49975 HTTP/2 폭탄 ★ CVE-2026-49975 HTTP/2 폭탄 PoC ★ 개요 CVE-2026-49975 는 Apache HTTP Server 의 서비스 거부DoS 취약점입니다. 이 취약점은 HTTP/2 요청 처리 경로에서 발생하며, 여러 cookie 헤더 필드가 LimitRequestFields에 제대로 계산되지 않고 병합될 수 있습니다. 공격자는 작은 HPACK 인코딩 HTTP/2 요청을 보내 많은 cookie 헤더 필드로 확장시킴으로써, 서버가 Cookie 헤더 병합 과정에서 메모리를 반복적...

CVE-2026-83550

A flaw in postgres-exporter exposes debug endpoints on the unauthenticated metrics listener due to a blank import of net/http/pprof . A remote attacker within the cluster network can access these endpoints to perform information disclosure , potentially uncovering process arguments, goroutine sta...

CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener

A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...

CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener

A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...

CVE-2026-83550

A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...

CVE-2026-84429

A flaw was found in Django. Inefficient processing occurs when the HTTP header parsing function handles quoted parameter values containing numerous separator characters. A remote, unauthenticated attacker could exploit this flaw by sending requests with crafted header parameters, causing excessiv...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server ローカル権限昇格 CARPE DIEM 説明 CVE-2019-0211 は、modprefork および modphp または PHP-FPM を使用する Apache HTTP Server バージョン 2.4.17 から 2.4.38 に影響を与える ローカル権限昇格 の脆弱性です。 この脆弱性により、www-data シェルを持つ攻撃者が、PHP の Use-After-Free UAF と Apache の scoreboard の破損を組み合わせて root に昇格できます。Apache が gracefu...

CVE-2018-5354

CVE-2018-5354 ANIXIS 비밀번호 재설정 클라이언트 권한 상승/RCE 정보 제조사: ANIXIS 제품: ANIXIS 비밀번호 재설정 클라이언트 영향을 받는 버전: 3.22 이전 버전 연구자: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 설명 ANIXIS 비밀번호 재설정 클라이언트 3.22 이전 버전의 사용자 지정 GINA/CP 모듈은 스푸핑을 통해 원격 공격자가 코드를 실행하고 권한을 상승시킬 수 있도록 합니다. 클라이언트가...

sickrageWTF

SickRage의 GitHub 자격 증명 평문 노출 취약점 CVE-2018-9160 1. 개요 Exploit Title: SickRage HTTP 응답 내 평문 자격 증명 Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link: https://github.com/SickRage/SickRage Version:...

CVE-2019-10092

CVE-2019-10092: Apache HTTP Server의 "Proxy Error" 페이지를 통한 제한적 크로스 사이트 스크립팅 Apache HTTP Server 2.4.0-2.4.39에서 modproxy 오류 페이지에 영향을 주는 제한적 크로스 사이트 스크립팅 문제가 보고되었습니다. 공격자는 오류 페이지의 링크를 잘못된 형태로 만들어 자신이 선택한 페이지를 가리키도록 할 수 있습니다. 이 취약점은 프록시가 활성화되어 있지만 Proxy Error 페이지가 표시되도록 잘못 구성된 서버에서만 악용될 수 있습니다. 공급업체 공...

USN-8890-1: libsoup vulnerabilities

It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-4271 It was discovered that libsoup incorrectly handled certain HTTPS...

CVE-2025-31324

CVE-2025-31324 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 대상의 기본 URL에 HTTP GET 요청을 수행하고 응답 헤더를 검사하여 SAP NetWeaver Application Server 인스턴스를 식별합니다. 이 정보는 시스템이 CVE-2025-31324에 취약할 수 있는지 여부를 평가하는 데 도움이 됩니다. 이 스크립트는 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드하세요. 2. 템플릿을 로컬 시스템에 복사하세요. 3. 다음 명령어를 실행하세요: nuclei -u...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

K000163569: Multiple Apache Tomcat vulnerabilities

Security Advisory Description CVE-2026-75973 Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to...

i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

NPM: i18next-http-backend incomplete URL validation permits SSRF

NPM: i18next-http-backend incomplete URL validation permits SSRF vulnerability discovered by ? in WordPress Npm i18next-http-backend versions 4.0.2...

GHSA-XVQ9-WJP8-HWQF i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

CVE-2026-4253-Scanner

CVE-2026-42530 — 安全確認スキャナー NGINX HTTP/3 QUIC use-after-free に対する非破壊的マススキャナー バグを引き起こすことなく、どのホストが露出しているかを把握します。 ⚠️ 免責事項 このツールは許可されたセキュリティテスト専用 です。自身のインフラストラクチャ、または明示的な書面による許可を得たシステムにのみ使用してください。読み取り専用のフィンガープリント を実行し、脆弱性を悪用しません 。スコープ内にとどまり、適用される法律と責任ある開示の原則を遵守する責任はあなたにあります。著者は誤用に対する一切の責任を負いません。 🔍...

DEBIAN-CVE-2026-105800

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...