CVE-2026-101701

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: Request Submission and Scheduling. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

CVE-2026-113704 a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/pushnotificationsender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request...

CVE-2026-113704

A vulnerability exists in a2aproject a2a-rs up to version 0.4.3 within the Push Notification Handler component. Specifically, the HttpPushSender function in the file crates/server/src/push_notification_sender.rs is susceptible to server-side request forgery (SSRF) due to the manipulation of the T...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

CVE-2026-93744

The IBM Navigator for i application on IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1 Option 3) is vulnerable to an improper authentication flaw (CWE-287 ). An unauthenticated remote attacker can bypass security restrictions by sending a specially crafted HTTP request to any URL within the Navig...

CVE-2026-93744 IBM i Improper Authentication

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...

AOSP-DownloadProviderHeadersDumper

AOSP-DownloadProviderHeadersDumper PoC Exploiting Headers Disclosure in Android's Download Provider CVE-2018-9546 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Request-Headers-Disclosure-CVE-2018-9546.pdf More Information...

CVE-2004-0789-DDOS

sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

CVE-2026-101701

A vulnerability exists in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling ) affecting versions 12.2.3-12.2.15 . A high privileged attacker with logon access to the infrastructure where the product executes can easily exploit this f...

CVE-2026-28763

A stack-based buffer overflow vulnerability exists in the boa web server's formMapDelDevice hostname functionality in the X2000R router (version: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The flaw is caused by an unchecked strcpy operation that copies an HTTP POST hostname parameter into a fixe...

EUVD-2026-105350

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger...