PT-2026-141226

Ettercap through 0.8.4.1 contains an out-of-bounds read and size t underflow vulnerability in sslw remove sts in src/ec sslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through...