255 matches found
wonitor
web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...
CVE-2026-73856 ModSecurity: Response Body Inspection Bypass
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, src/transaction.cc compares a response Content-Type value against SecResponseBodyMimeType entries case-sensitively. A mixed-case response media type that is...
PentagridResponseOverview
PentagridResponseOverview Response Overview Extension for BurpSuite Author: Tobias "floyd" Ospelt, @floydch, http://www.floyd.ch Pentagrid AG, https://www.pentagrid.ch Find exotic responses by grouping response bodies response overview This extension groups all response bodies by similarity and...
CLEANSTART-2026-ET22170 undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response
Security vulnerability affects the langfuse-worker package. undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response...
CLEANSTART-2026-UL15265 undici's retry handler can leave an already-exposed response body pending forever
Security vulnerability affects the renovate package. undici's retry handler can leave an already-exposed response body pending forever...
SUSE CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
AZL-112262 CVE-2026-103995 affecting package tensorflow 2.16.1-11
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
AZL-111179 CVE-2026-103995 affecting package python-py 1.11.0-1
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995 Lenient parsing of integers for response body and chunk framing
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-103995
The CPython runtime (referenced via GitHub issues) contains a vulnerability in how it parses response bodies and chunks. The software incorrectly handles non-hex or negative integers , which can lead to the misinterpretation of HTTP response contents . This behavior is associated with CWE-444 (HT...
PT-2026-127214
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
PT-2026-128059
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
CVE-2026-115823
Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses wi...
GHSA-F48P-C9V4-H7XV Echo: BodyDump captures request and response bodies without size limits in v4
Impact Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. A client able to submit large requests to a route using BodyDump could cause large allocations before the application handler ran. Large responses,...
CVE-2026-114459
A flaw was found in modqos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an...
CVE-2026-114459 Mod_qos: out-of-bounds reads in response-body substring matching
A flaw was found in modqos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an...
CVE-2026-114459 Mod_qos: out-of-bounds reads in response-body substring matching
A flaw was found in modqos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an...