143198 matches found
php: php: Out-of-bounds read via empty HTTP redirect Location header
A flaw was found in PHP. When the HTTP stream wrapper processes a redirect response containing an empty Location header, an out-of-bounds read occurs by accessing memory beyond the allocated buffer. A malicious server can exploit this flaw to influence the client's redirect target path, potential...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2019-9511_Priority-Churn-Data-Dribble
HTTP/2 CVE-2019-9511 & CVE-2019-9513 Lightweight Probes Repository with controlled validation scripts for behaviors associated with CVEs CVE-2019-9511 and CVE-2019-9513 , both related to denial of service vectors in HTTP/2 implementations. The scripts were created to support technical validations...
CVE-2026-91453
A flaw was found in OpenJDK's Lightweight HTTP Server. An unauthenticated remote attacker can exploit this vulnerability over the network by sending crafted requests to exposed server Application Programming Interfaces APIs. Successful exploitation allows an attacker to perform unauthorized data...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-105800 DESCRIPTION: i18next-http-backend is a backend layer for i18next...
CVE-2026-114472 Insufficient Resource Pool in hMailServer
Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01...
CVE-2026-114472
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to an insufficient resource pool issue in the ACME HTTP-01 challenge responder. The responder handles only one connection at a time and waits up to five seconds for a request; a remote unauthenticated attacker can hold the ...
EUVD-2026-107315
Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01...
EUVD-2026-107313
Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a brows...
CVE-2026-114470 Cross-Site Request Forgery (CSRF) in hMailServer
Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a brows...
CVE-2026-114470
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to a Cross-Site Request Forgery (CSRF) in the REST API . The root cause is that while the API protects cookie-based sessions, it does not apply the same protections to HTTP Basic authentication . Because browsers cache Basi...
Two critical RCEs in PHP core
Update 10/22: Added section detailing observations of in the wild exploitation and associated IoCs. Cisco Talos is tracking the disclosure of two unauthenticated remote code execution RCE flaws in PHP core, dubbed "php2shell", triggered by a plain HTTP request and exploitable before any applicati...
CVE-2022-23779
CVE-2022-23779 CVE-2022-23779 is a security vulnerability in Zoho ManageEngine Desktop Central It is classified as an information disclosure issue CWE-200 where the software leaks internal server information to unauthorized users. Versions before 10.1.2137.8 are affected ::Medium severity...
CVE-2017-12635_36
Lab7-CVE-2017-12635-12636 I. SYSTEM ANALYSIS Identifying Attack Surface Starting with what is running in the environment. I list all active containers: docker ps Victim exposes a single port:5984 ⇒ I curl directly into it to probe for more information: curl -i http://192.168.3.137:5984/ Analyzing...
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...
net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections
A flaw was found in Go's net/http package. When an HTTP CONNECT request with a request body is rejected by a server, the client transport can desynchronize the connection before returning it to the shared idle pool. In shared reverse proxy environments, a remote attacker can exploit this issue to...
net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion
A flaw was found in the Go net/http package. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 requests that declare an excessive number of trailer header fields. Because the server bypasses configured header limits when allocating memory for these declarations, an attacker...
net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers
A flaw was found in Go's net/http package. When operating as a reverse proxy, the HTTP/2 implementation does not properly validate framing-related headers in responses received from upstream servers before forwarding them to downstream HTTP/1 clients. A malicious upstream server can exploit this...
net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server
A flaw was found in Go's HTTP/2 server implementation. A remote attacker can bypass connection-level flow control limits—mechanisms that regulate incoming network data—potentially causing excessive memory consumption and a Denial of Service DoS. This issue occurs because the server improperly...
net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses
A flaw was found in Go's net/http package. When an HTTP server sends a successful response to an HTTP/1 CONNECT request without taking raw control of the connection, it improperly continues to process incoming data as standard HTTP requests instead of establishing a tunnel. A remote attacker can...