CVE-2026-55613

The uhttpd HTTP server contains an application-layer body-handler flaw in the uh_ubus_data_send() function within ubus.c . When a POST /ubus JSON body arrives in multiple TCP segments, an initial segment completing a JSON object can cause subsequent segments to take an existing-object parse-error...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage git clone...

GoldenEye

THIS PROJECT IS NO LONGER MAINTAINED GoldenEye GoldenEye is a Python 3 app for SECURITY TESTING PURPOSES ONLY! GoldenEye is an HTTP DoS Test Tool. Attack Vector exploited: HTTP Keep Alive + NoCache Usage USAGE: ./goldeneye.py OPTIONS OPTIONS: Flag Description Default -u, --useragents File with...

nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reuse

A flaw was found in Node.js. The HTTP Agent keep-alive connection reuse logic can cause a client to treat data that arrived on an idle socket before a new request was sent as the response to that request. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when...

nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reuse

A flaw was found in Node.js. The HTTP Agent keep-alive connection reuse logic can cause a client to treat data that arrived on an idle socket before a new request was sent as the response to that request. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when...

SUSE CVE-2026-115823

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

CVE-2026-105481

A flaw was found in Node.js. The HTTP Agent keep-alive connection reuse logic can cause a client to treat data that arrived on an idle socket before a new request was sent as the response to that request. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when...

Linux Distros Unpatched Vulnerability : CVE-2026-115823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman...

DEBIAN-CVE-2026-115823

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

CVE-2026-115823

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

CVE-2026-115823

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

CVE-2026-115823 Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

CVE-2026-115823

The Starman web server for Perl (versions before 0.4019 ) contains a vulnerability where it incorrectly sends response bodies for HEAD requests on both array and streaming response paths. Because Starman omits chunked framing for these requests while still writing the body, it causes desynchroniz...

CVE-2026-115823 Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

CVE-2026-115823

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

EUVD-2026-109560

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...

Node.js 26.12.0 HTTP Keep-Alive Premature Response Acceptance

Node.js versions 22.x, 24.x, and 26.x contain an HTTP Agent keep-alive flaw that can cause a client to accept a response sent before its request. The supplied offline checker compares reported versions against fixed releases 22.23.4, 24.22.1, and 26.12.1...

PT-2026-123059

Name of the Vulnerable Software and Affected Versions Starman versions prior to 0.4019 Description Starman for Perl sends response bodies for HEAD requests, which leads to response desynchronization on keep-alive or pipelined connections. For HEAD requests, the software omits chunked framing but...

Exploit for CVE-2026-105481

node-cve-2026-105481-check Standalon...

CVE-2026-105481

A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event...