248 matches found
wonitor
web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...
PentagridResponseOverview
PentagridResponseOverview Response Overview Extension for BurpSuite Author: Tobias "floyd" Ospelt, @floydch, http://www.floyd.ch Pentagrid AG, https://www.pentagrid.ch Find exotic responses by grouping response bodies response overview This extension groups all response bodies by similarity and...
AZL-111179 CVE-2026-103995 affecting package python-py 1.11.0-1
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995 Lenient parsing of integers for response body and chunk framing
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995
The CPython runtime (referenced via GitHub issues) contains a vulnerability in how it parses response bodies and chunks. The software incorrectly handles non-hex or negative integers , which can lead to the misinterpretation of HTTP response contents . This behavior is associated with CWE-444 (HT...
PT-2026-128059
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
PT-2026-127214
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-115823
Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...
GHSA-F48P-C9V4-H7XV Echo: BodyDump captures request and response bodies without size limits in v4
Impact Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. A client able to submit large requests to a route using BodyDump could cause large allocations before the application handler ran. Large responses,...
CVE-2026-114459
A flaw was found in modqos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an...
CVE-2026-114459
A flaw in the mod_qos module allows an unauthenticated remote attacker to trigger an out-of-bounds read due to improper boundary checking while inspecting HTTP response bodies. By sending specifically crafted server responses, an attacker can cause an Apache worker process to crash, leading to a ...
CVE-2026-114459 Mod_qos: out-of-bounds reads in response-body substring matching
A flaw was found in modqos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an...
CVE-2026-114459 Mod_qos: out-of-bounds reads in response-body substring matching
A flaw was found in modqos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an...
Pascal Buchbinder mod_qos buffer error vulnerability
Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a buffer error vulnerability. This vulnerability stems from improper boundary checks when examining the HTTP response body, allowing the module to read memory beyond the allocated buffer boundaries. Unauthenticated remote...
CVE-2026-84180
A flaw was found in Apache Camel's Knative component. When message processing fails, the Knative HTTP consumer returns detailed exception information, including class names, messages, and stack traces, directly in the response body to the caller. A remote attacker could exploit this flaw by sendi...
CLEANSTART-2026-MV66372 undici's dump interceptor reads and discards a response body up to a configurable maximum size
CVE-2026-84947 affects multiple packages. undici's dump interceptor reads and discards a response body up to a configurable maximum size. See references for individual vulnerability details...
CLEANSTART-2026-DL95633 undici's retry handler can leave an already-exposed response body pending forever
CVE-2026-18149 affects multiple packages. undici's retry handler can leave an already-exposed response body pending forever. See references for individual vulnerability details...
GO-2026-6690 Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion in github.com/corazawaf/coraza
Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion in github.com/corazawaf/coraza...