109291 matches found
CVE-2026-81092
mcp-go before 0.56.0 accepted HTTP requests on its Streamable HTTP and SSE transports without validating the Host header . Specifically, StreamableHTTPServer.ServeHTTP (server/streamable_http.go) and SSEServer.ServeHTTP (server/sse.go) served any request arriving over a loopback connection regard...
CVE-2026-81092 mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding
mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamablehttp.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport's...
CVE-2026-81092 mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding
mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamablehttp.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport's...
EUVD-2026-67147
mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamablehttp.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport's...
CVE-2026-63379
A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP Hypertext Transfer Protocol trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers,...
golang security, bug fix, and enhancement update
An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...
CVE-2026-73051
A flaw was found in actix-http. This vulnerability allows unauthenticated remote attackers to perform HTTP request smuggling. By sending specially crafted HTTP/1.1 requests that include both Content-Length and Transfer-Encoding: chunked headers, an attacker can desynchronize backend requests...
PNGboomer-CVE-2026-77622
PNGboomer — CVE-2026-77622 Exploit de negação de serviço para o listener HTTPS do Sliver C2. Força bruta no nonce de codificação PNG por sessão e entrega uma bomba de descompressão que esgota a memória do servidor. Publicado como GHSA-663m-7x7m-g4fw. Resumo O canal C2 HTTPS do Sliver encapsula...
Apache-CVE-2026-23918-fix
Apache HTTP Server: http2: Doppeltes Freigeben Double Free und mögliche RCE bei frühem Reset CVE-2026-23918. Schwachstelle mit doppeltem Freigeben Double Free und möglicher RCE im Apache HTTP Server mit dem HTTP/2-Protokoll. Dieses Problem betrifft Apache HTTP Server: 2.4.66. Benutzern wird...
CVE-2026-34197-Lab
CVE-2026-34197 — Laboratório de RCE Jolokia do Apache ActiveMQ Classic Visão Geral Este repositório é um laboratório Docker local para estudar a CVE-2026-34197 , um problema de execução remota de código no Apache ActiveMQ Classic acessível através da API Jolokia JMX-HTTP. O laboratório compara du...
CVE-2026-23918-Elite-Auditor
☣️ CVE-2026-23918-Elite-Auditor ☣️ Ferramenta Profissional de Inteligência e Reconhecimento para a Vulnerabilidade de Double-Free no Apache HTTP/2. 📌 Visão Geral CVE-2026-23918 CVSS 8.8 é uma falha crítica de corrupção de memória no Apache HTTP Server 2.4.66. Este auditor foi projetado para...
CVE-2026-23918
CVE-2026-23918 Apache HTTP/2 स्कैनर यह रिपॉजिटरी एक सरल, चलाने में सुरक्षित Python स्कैनर है जो CVE-2026-23918, Apache HTTP/2 में एक गंभीर double-free भेद्यता, से ग्रस्त सर्वरों की पहचान करने के लिए डिज़ाइन किया गया है। 🔍 मुख्य विशेषताएं संस्करण पहचान : Apache 2.4.66 के उपयोग की पहचान करने के लिए...
CVE-2026-74848
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...
RHSA-2026:56868 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update
Bulletin has no description...
CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC
Achten Sie in Echtzeit auf den Double-Free-Fehler sudo tail -f /usr/local/apache2-vuln/logs/errorlog | grep -i "double free|exit signal" Führen Sie den PoC aus python3 /cve-2026-23918-poc.py localhost 9443...
CVE-2026-23918-test
CVE-2026-23918-test Dieses Repository enthält einen Proof of Concept PoC, der die Double-Free-Schwachstelle CVE-2026-23918 im Apache HTTP Server 2.4.66 modhttp2 demonstriert. Die Schwachstelle beruht auf einer Race Condition während der frühen Verarbeitung von RSTSTREAM-Frames. Ich habe mich auf...
-cve-2021-45232
Holen Sie sich bald den vollständigen Artikel auf https://Hellofhackers.com...
CVE-2021-41773
CVE-2021-41773 Apache2 2.4.49 - Exploit LFI e RCE Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...
CVE-1999-0678
CVE-1999-0678: Progetto di Rilevamento e Bonifica Autore: Pham Huu Minh Data: Dicembre 2025 Panoramica del Progetto Questo progetto dimostra l'intero ciclo di vita di una valutazione delle vulnerabilità, prendendo di mira specificamente la vulnerabilità legacy Directory Traversal CVE-1999-0678 su...