CVE-2025-55182

CVE-2025-55182 Next.js Prototype Pollution CVE-2025-55182 is a critical prototype pollution vulnerability in nextjs that allows rce via improper input sanitization in the framework's request handling mechanism, this whole thing happens because nextjs is out here trusting JSON objects like a...

cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...

EUVD-2026-120678

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

CVE-2026-109793 Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

PT-2026-141242

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

ROS-20261110-73-0081

The vulnerability in the Visual Studio Code source code editor is related to flaws in HTTP request handling. Exploiting this vulnerability could allow a remote attacker to bypass security restrictions...

CVE-2026-24733

CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incorrectly handled an HTTP/0.9-style HEAD request under certain security-constraint configurations. CVE-2026-24733 Defensive Verifier A lightweight, dependency-free Python security verifier for CVE-2026-24733 , an Apache Tomcat HTTP/0.9 HEAD...

CVE-2026-110944

Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...

cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...

CVE-2019-16278

CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Description Remote Code Execution vulnerability in Nostromo nhttpd versions 2&1 Usage python3 cve-2019-16278.py Example: python3 cve-2019-16278.py 192.168.1.100 80 "id" python3 cve-2019-16278.py 10.10.10.10 8080 "cat /etc/passwd" python3...

EUVD-2026-117406

Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...

CVE-2026-73095 Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...

CVE-2026-73095

Apache Juneau versions through 9.2.0 are vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability. The MessagePack parser , enabled by default in the REST server, sizes buffers based on length values provided in the input. An unauthenticated client can send a small amou...

Linux Distros Unpatched Vulnerability : CVE-2026-110944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server. CVE-2026-110944 Note that Nessus relies on the...

SUSE CVE-2026-110944

Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...

CVE-2026-110944

Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...

CVE-2026-110944

A resource exhaustion vulnerability exists in the HTTP request handling of the QHttpServer component within Qt HTTP Server . The issue is caused by the allocation of resources without limits or throttling (CWE-770). This vulnerability can impact the availability of the affected service. No specif...

CVE-2026-110944: qt Qt Framework: Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server.

Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server...

CLEANSTART-2025-YY45740 flaw was found in the X server's request handling

Security vulnerability affects the xorg-server package. A flaw was found in the X server's request handling...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147034 advisory. A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's reques...