puma_header_normalization-CVE-2024-45614

Puma Header normalization CVE-2024-45614 Verification advisory: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4 fix commit: https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043 Results Execution results of request.rb duplicate Target| Result ---|---...

CVE-2020-35669

CVE-2020-35669 dummy server please run dummy server using 1st terminal sudo nc -l 127.0.0.1 80 apply given diff diff --git a/main.dart b/main.dart index 8c78291..a46f4d0 100644 --- a/main.dart +++ b/main.dart @@ -4,7 +4,7 @@ import 'package:http/src/request.dart'; void main async var r = Request...

CVE-2026-116531

A flaw was found in HTTP::Body. A remote attacker can cause a Denial of Service DoS or unexpected request processing by sending specially crafted chunked HTTP requests. This issue occurs because the module fails to properly track chunk boundaries when reading chunked request bodies. As a result,...

ROS-20261023-73-0253

The vulnerability in Tomcat11 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

ROS-20261022-73-0103

The vulnerability of the ASP.NET Core software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2026-111810

Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many such headers makes the proxy write far more log data than the request contains. This issue affects Apache Traffic Server: 9.2.15, 10.1.4,...

ROS-20261019-73-0032

The vulnerability of the ASP.NET Core software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a heap use-after-free occurred in irpthreadfunc because the IRP was freed by irp-Complete and then accessed again during the error path. This vulnerability has been fixed in version 3.20.1...

CVE-2026-107832

A flaw was found in fastify. The framework's route schema validation fails to properly normalize the casing of header names declared within nested property name schemas. A remote attacker can exploit this vulnerability by submitting requests with restricted headers, bypassing header allow-lists o...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-69414 — Microsoft Malware Protection Engine EoP Explo...

Visual Studio Code Source Editor HTTP Request Processing

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

ROS-20261001-73-0058

The vulnerability of Eclipse Jetty servlet containers is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to carry out attacks by substituting HTTP requests...

Prototype Pollution

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via insufficient hardening of runtime option handling across multiple request-processing helpers lib/helpers/resolveConfig.js,...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

CVE-2026-96763 kvcache-ai mooncake MountSegment Request Processing segment.cpp access control

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...

CVE-2026-96763

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...

EUVD-2026-85752

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...

CVE-2026-96763 kvcache-ai mooncake MountSegment Request Processing segment.cpp access control

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...

CVE-2026-96763

The kvcache-ai mooncake software (versions up to 0.3.12 , 0.3.13.post1 , and 0.3.14-rc1 ) contains a security flaw in the MountSegment Request Processing component. Specifically, the ScopedSegmentAccess::MountSegment function within the segment.cpp file is susceptible to improper access controls ...

CVE-2026-96763: Improper Access Control

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...