GHSA-HR6J-W4MW-G9MJ alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Summary A single unauthenticated HTTP request to a path starting with ? e.g. GET ? HTTP/1.1 crashes the entire server process. The request line parser passes the path to sanitizeRequestPath which indexes the first byte of the path after stripping the query string. It does so without checking that...

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Summary A single unauthenticated HTTP request to a path starting with ? e.g. GET ? HTTP/1.1 crashes the entire server process. The request line parser passes the path to sanitizeRequestPath which indexes the first byte of the path after stripping the query string. It does so without checking that...

CVE-2026-55484

ALOS HTTP , a Linux-first Go web framework with a custom networking stack, is vulnerable to an unauthenticated remote denial-of-service . The root cause is an unchecked p[0] access in core/utils.go::sanitizeRequestPath after splitPathQuery processes a path beginning with a question mark, leaving ...

EUVD-2026-67872

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-56848

CVE-2026-56848 NVD-Beschreibung Ein Fehler in der HTTP/2-Verarbeitung von Node.js ermöglicht es, nghttp2sessionmemsend reentrant aufzurufen, während nghttp2sessionmemrecv ausgeführt wird, was zu einem Heap-Use-after-Free führt. Diese Schwachstelle betrifft Node.js 26.x, 24.x und 22.x. Hinweis: Di...

CVE-2023-44487

HTTP/2 Rapid Reset: CVE-2023-44487 Beschreibung Dieses Repository enthält Proof-of-Concept-Code PoC für die HTTP/2-Rapid-Reset-Schwachstelle, die als CVE-2023-44487 identifiziert wurde. Überblick über die Schwachstelle CVE-ID : CVE-2023-44487 Auswirkung : Denial of Service DoS Betroffene Protokol...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner Ein Python-basiertes Erkennungstool für CVE-2024-40725 , eine Schwachstelle zur Offenlegung von Quellcode im Apache HTTP Server, die die Versionen 2.4.0 und 2.4.61 betrifft. Rechtlicher Hinweis: Führen Sie diesen Scanner nur gegen Server aus, die Ihnen gehören oder für die...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Laboratorio Apache HTTP Server 2.4.49 Riproduzione di CVE-2021-41773 , una vulnerabilità di path traversal in Apache HTTP Server 2.4.49. Questo progetto utilizza Docker per creare un ambiente vulnerabile isolato e un PoC Python per dimostrare la divulgazione controllata di file...

cybersecurity_portfolio

Portfolio. Gleb Usoltsev Studente del 2° anno, Istituto di Informatica e Cybersecurity, SPbPU Pietro il Grande, indirizzo 10.03.01 «Sicurezza informatica». Nell'ambito del tirocinio formativo introduttivo presso JSC «Positive Technologies», sono stati svolti due casi pratici. Di seguito la loro...

CVE-2026-23751-poc

CVE-2026-23751-poc Prova de conceito que reimplementa a técnica descrita em Code White's NewRemotingTricks, direcionada ao Tungsten Automation Kofax Capture. CVE-2026-23751 Título: Tungsten Automation - Kofax Capture Leitura/Gravação de Arquivos Não Autenticada e Coerção SMB via .NET HTTP Remotin...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – Confusione del tunnel CONNECT HTTP/2 di libcurl Codice del programma simulazione in C root@kitploit: // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Sfruttamento del Buffer Overflow di Apache modlua 📋 Panoramica Apache modlua Buffer Overflow Exploitation è una piattaforma di sfruttamento avanzata, di livello enterprise, per - una vulnerabilità critica di buffer overflow nel modulo di Apache HTTP Server 2.4.x. Questo...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Consegna del profilo MDM iOS su HTTP Codice del programma Server MDM Python Flask root@kitploit: mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS Codice del programma client + server Python/http2 root@kitploit: http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET,...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – Avvelenamento della cache HTTP tramite parametro di query non incluso nella chiave Panoramica Una cache web utilizza solo il percorso dell'URL come chiave della cache, ignorando i parametri di query. Un attaccante può aggiungere un payload dannoso a un parametro non incluso nella...

nextjs-middleware-auth-bypass-lab

Next.js Middleware Authorization Bypass CVE-2025-29927 Cos'è la vulnerabilità? Nelle applicazioni Next.js, il middleware viene eseguito prima che le richieste raggiungano l'applicazione, effettuando controlli come autenticazione e autorizzazione. Nella vulnerabilità CVE-2025-29927, a causa...

CVE-2026-66753-HTTP-Header-Injection-via-Unvalidated-CR-and-LF-in-Header-Values-tiny_http-

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values tinyhttp Zugewiesene CVE-ID: CVE-2026-66753 Zusammenfassung tinyhttp lehnt Wagenrücklauf oder Zeilenvorschub in HTTP-Header-Werten nicht ab, und zwar in keiner Richtung. Auf der Anforderungsseite beendet...

CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

Sicherheitshinweis: HTTP-Request-Smuggling durch nicht geparste Transfer-Encoding-Werte tinyhttp Zugewiesene CVE-ID: CVE-2026-66752 Zusammenfassung tinyhttp prüft lediglich, ob ein Transfer-Encoding-Header vorhanden ist. Der Wert selbst wird nie betrachtet. Jeder Wert – einschließlich Kodierungen...

CVE-2022-31813

Avvia il campo di tiro docker compose up --build Accesso normale root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...