CVE-2025-1974

README Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1. Change the ip in shell.c 2. Check the docker is available and run make shell.so. We need to build so in alpine to make sure it can works in...

CVE-2026-34040-PoC

CVE-2026-34040 — Docker/Moby AuthZ Plugin Bypass Lab PoC EN: A lab reproduction of a vulnerability that bypasses Docker Moby authorization AuthZ plugins using an oversized 1MB request body. Vulnerability facts Item| Value ---|--- CVE| CVE-2026-34040 CVSS 3.1| 8.8 High —...

CVE-2026-115269

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to hold stream processes open indefinitely via WINDOWUPDATE or empty SETTINGS frames sent while a Plug reads the request body...

EUVD-2026-109819

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to hold stream processes open indefinitely via WINDOWUPDATE or empty SETTINGS frames sent while a Plug reads the request body...

CVE-2026-115269 HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to hold stream processes open indefinitely via WINDOWUPDATE or empty SETTINGS frames sent while a Plug reads the request body...

CVE-2026-115269

The mtrudel bandit web framework (versions 1.4.0 before 1.14.0 ) is vulnerable to an Allocation of Resources Without Limits or Throttling issue in its HTTP/2 request body reader. Specifically, Bandit.HTTP2.Stream.do_read_data/4 in lib/bandit/http2/stream.ex restarts a read_timeout countdown whene...

DEBIAN-CVE-2026-115817

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as readtimeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

CVE-2026-115817

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as readtimeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

CVE-2026-115824 Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies

Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a hu...

CVE-2026-115824

Starman versions before 0.4019 for Perl are vulnerable to memory exhaustion due to unbounded buffering of chunked request bodies. The underlying cause is that the chunked body decoder retains chunks in memory until completion without enforcing a limit on the length of a chunk-size line. A remote ...

CVE-2026-115824 Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies

Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a hu...

CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as readtimeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as readtimeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

CVE-2026-115817

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as readtimeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

EUVD-2026-109558

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as readtimeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

CVE-2026-115817

Starman versions prior to 0.4019 for Perl are vulnerable to a denial-of-service condition because Content-Length and chunked request bodies are processed using blocking reads without a deadline. While read_timeout covers headers, a client can stall or slowly trickle the request body to hold a wor...

PT-2026-123060

Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a hu...

PT-2026-123057

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read timeout covers only the headers. Content-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the...

npm: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

npm: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body vulnerability discovered by ? in WordPress npm body-parser versions 1.20.9...

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell " proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by...