Lucene search
+L

6 matches found

attackerkb
attackerkb
•added 2026/08/03 2:05 a.m.•19 views

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

5.8AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•23 views

PT-2026-36541

Name of the Vulnerable Software and Affected Versions bandit versions prior to 1.11.0 Description Inconsistent interpretation of HTTP requests allows HTTP request smuggling via duplicate Content-Length headers. The function get content length in Elixir.Bandit.Headers uses List.keyfind/3, which on...

6.3CVSS5.8AI score0.00547EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
•added 2026/03/18 4:18 p.m.•18 views

h3 has a middleware bypass with one gadget

H3 NodeRequestUrl bugs Vulnerable pieces of code : js import H3, serve, defineHandler, getQuery, getHeaders, readBody, defineNodeHandler from "h3"; let app = new H3 const internalOnly = defineHandlerevent, next = const token = event.headers.get"x-internal-key"; if token !==...

9.1CVSS6AI score0.00443EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2025/11/18 11:15 p.m.•12 views

DEBIAN-CVE-2025-65015

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions from 1.3.3 to before 1.3.5 and from 1.4.0 to before 1.4.2, the ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause...

7.5CVSS5.3AI score0.0041EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/18 6:26 p.m.•32 views

GHSA-FRFH-8V73-GJG4 joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads

Summary The ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause Python logging to record an arbitrarily large, forged JWT payload. Details In situations where a misconfigured — or entirely absent — production-grade web server sits in front of a Python...

9.2CVSS6AI score0.0041EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2016/10/13 12:00 a.m.•13 views

PT-2016-3323 · Apache +2 · Apache Http Server +2

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions prior to 2.4.24 Description: The issue is related to the implementation of mod remoteip and mod rewrite modules in the Apache HTTP Server, which is associated with insufficient authentication data verification. Thi...

8.1CVSS6.9AI score0.88844EPSS
SaveExploits10References62
Rows per page
Query Builder