cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

cve-2025-29927-lab

此仓库包含一个使用 Next.js 构建的 故意存在漏洞 的 Web 应用程序。它旨在演示和研究名为 CVE-2025-29927 的安全问题。 该项目的目标是帮助安全研究人员、学生和漏洞赏金猎人了解该漏洞如何在类似真实环境的环境中运作。 !CAUTION 该应用程序是故意不安全的，绝不 应部署到生产环境。 🔩目的 了解该漏洞的工作原理 练习安全地识别和利用它 理解不安全中间件处理的影响 提升漏洞赏金和 Web 安全技能 🐞漏洞 CVE-2025-29927 与基于 Next.js 构建的应用程序中请求逻辑处理不当有关，尤其是在中间件中。这可能允许攻击者： 1. 绕过身份验证或授权检查 ...

CVE-2019-16278

CVE-2019-16278 - Nostromo nhttpd 远程代码执行 漏洞描述 在 Nostromo nhttpd 版本 2&1 使用方法 root@kitploit: python3 cve-2019-16278.py 示例： root@kitploit: python3 cve-2019-16278.py 192.168.1.100 80 "id" python3 cve-2019-16278.py 10.10.10.10 8080 "cat /etc/passwd" python3 cve-2019-16278.py target.com 80 "whoami"...

CVE-2025-55182

CVE-2025-55182 Next.js Prototype Pollution CVE-2025-55182 is a critical prototype pollution vulnerability in nextjs that allows rce via improper input sanitization in the framework's request handling mechanism, this whole thing happens because nextjs is out here trusting JSON objects like a...

EUVD-2026-68615

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

CVE-2026-21827 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

CVE-2026-21827

HCL Connections is affected by an information disclosure vulnerability caused by improper handling of request data , potentially allowing a user to obtain sensitive information they are not entitled to access. The CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexi...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

SUSE CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74955

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Request Handling component...

Linux Distros Unpatched Vulnerability : CVE-2026-74955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-15792

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service DoS, making the BuildKit service unavailable. Mitigation Avoid building container images using...

CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

UBUNTU-CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74955

Mozilla Firefox's Request Handling component contains a privilege escalation flaw rated CVSS 8.8 (HIGH). Exploitation requires network access and user interaction but no prior privileges, with HIGH impacts to confidentiality, integrity, and availability. No in-the-wild exploitation is reported. R...

CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

EUVD-2026-60682

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74955 Privilege escalation in the Request Handling component

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...