Lucene search
+L

6 matches found

attackerkb
attackerkb
•added 2026/08/03 2:05 a.m.•25 views

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

5.8AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•28 views

PT-2026-36541

Name of the Vulnerable Software and Affected Versions bandit versions prior to 1.11.0 Description Inconsistent interpretation of HTTP requests allows HTTP request smuggling via duplicate Content-Length headers. The function get content length in Elixir.Bandit.Headers uses List.keyfind/3, which on...

6.3CVSS5.7AI score0.00626EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
•added 2026/03/18 4:18 p.m.•23 views

h3 has a middleware bypass with one gadget

H3 NodeRequestUrl bugs Vulnerable pieces of code : js import H3, serve, defineHandler, getQuery, getHeaders, readBody, defineNodeHandler from "h3"; let app = new H3 const internalOnly = defineHandlerevent, next = const token = event.headers.get"x-internal-key"; if token !==...

9.1CVSS5.9AI score0.00395EPSS
SaveExploits1References3Affected Software1
osv_debian
osv_debian
•added 2025/11/18 11:15 p.m.•18 views

DEBIAN-CVE-2025-65015

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions from 1.3.3 to before 1.3.5 and from 1.4.0 to before 1.4.2, the ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause...

7.5CVSS7.2AI score0.0044EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2025/11/18 6:26 p.m.•40 views

GHSA-FRFH-8V73-GJG4 joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads

Summary The ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause Python logging to record an arbitrarily large, forged JWT payload. Details In situations where a misconfigured — or entirely absent — production-grade web server sits in front of a Python...

9.2CVSS7.6AI score0.0044EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2016/10/13 12:00 a.m.•14 views

PT-2016-3323 · Apache +2 · Apache Http Server +2

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions prior to 2.4.24 Description: The issue is related to the implementation of mod remoteip and mod rewrite modules in the Apache HTTP Server, which is associated with insufficient authentication data verification. Thi...

8.1CVSS6.9AI score0.88844EPSS
SaveExploits11References62
Rows per page
Query Builder