612 matches found
serverless-prey
Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...
Puma6Fail
Puma 6 fail demo Tool to demonstrate issue from this post found by mackey: https://www.dslreports.com/forum/r31377755- Proof of concept code is already public elsewhere. See CVE-2017-5693. DoS occurs in either direction - UDP from LAN to WAN or WAN to LAN. Testing through a local Virgin Media Sup...
puma_header_normalization-CVE-2024-45614
Puma Header normalization CVE-2024-45614 Verification advisory: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4 fix commit: https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043 Results Execution results of request.rb duplicate Target| Result ---|---...
cve-2026-85706
CVE-2026-85706 — GitLab 未认证任意文件读取 CVSS 10.0 · 未认证 · 已被积极利用（CISA KEV） GitLab Workhorse （Go 反向代理）与 Puma/Grape （Ruby）之间的解析器差异，使未认证攻击者能够绕过 Workhorse 的加速上传交接，并以攻击者可控的 file.path 访问三个上传端点，从而在 GitLab 主机上实现任意文件读取 。 将 files 中的一个字符编码为 %66iles，会使 Workhorse 的上传路由无法匹配 （它基于 编码后 的路径进行匹配），而 Rails...
CVE-2026-56725
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
CVE-2026-56725 Zammad: Denial of Service via OTRS Import Controller
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
CVE-2026-56725 Zammad: Denial of Service via OTRS Import Controller
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
CVE-2026-56725
The open-source helpdesk system Zammad is vulnerable to a Denial of Service (DoS) attack in versions prior to 7.0.2 . The root cause is that the import_check and import_status actions in the OTRS import controller lack a setup_done_response guard, allowing them to execute on fully set-up producti...
PT-2026-98939
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description An unauthenticated remote attacker can cause a denial of service on a production instance. This occurs because the import check and import status actions lack the setup done response guard, allowing...
CVE-2026-56725: Missing Authentication for Critical Function
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
Astra Linux – Vulnerability in Puma
Puma is a Ruby/Rack web server designed for parallelism. In affected versions, clients could manipulate values set by intermediate proxies such as X-Forwarded-For by providing a version of the header with an underscore . Any users who rely on proxy-defined headers are affected. Versions...
Astra Linux – Vulnerability in Puma
Puma is a Ruby/Rack web server designed for parallelism. Prior to versions 6.3.1 and 5.6.7, Puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers, which could allow HTTP request smuggling. The severity of this issue depends heavily ...
Astra Linux – Vulnerability in Puma
Puma is an HTTP 1.1 server for Ruby/Rack applications. Before versions 5.5.1 and 4.3.9, using “puma” with a proxy that forwards HTTP header values containing the LF character could lead to HTTP request smuggling. A client could secretly send a request through a proxy, causing the proxy to send a...
Astra Linux – Vulnerability in Puma
Puma is a Ruby/Rack web server designed for parallelism. Prior to version 5.6.2 of Puma, Puma might not always call close on the response body. Before version 7.0.2.2, Rails relied on the response body being closed in order for its CurrentAttributes implementation to work correctly. The combinati...
Astra Linux – Vulnerability in Puma
Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, Puma exhibited incorrect behavior when parsing chunked transfer encoding bodies, allowing HTTP request smuggling. The fixed versions limit the size of chunk extensions. Without this limitation, an...
Astra Linux – Vulnerability in Puma
Puma is an HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted; it did not prevent new connections from being blocked by greedy persistent-connections that saturated all threads ...
Astra Linux – Vulnerability in Puma
Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP requests comply with the RFC7230 standard, Puma and the frontend proxy may disagree about where the requests start and...
Exploit for CVE-2026-85706
cve-2026-85706 Unauthenticated arbitrary local file read in G...
Linux Distros Unpatched Vulnerability : CVE-2026-68006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file CVE-2026-68006 Note that...