CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP 反序列化远程代码执行 本仓库包含 CVE-2021-3007 的完整可复现概念验证（PoC）及 Nuclei 利用模板。该漏洞是 Zend\Http\Response\Stream（laminas-http Nuclei 利用模板 ├── docker-compose.yml - 脆弱测试环境 ├── Dockerfile ├── vulnerable-app/ │ ├── index.php - unserialize 脆弱端点 │ └── composer.json - 脆弱依赖 ├── exploit.php -...

Linux Distros Unpatched Vulnerability : CVE-2026-42036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response...

CVE-2026-42036

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforcing maxContentLength. This bypasses configured response-size limits and allows unbounded downstream consumption. This...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data. PoC js hummus = require'muhammara' writer = new hummus.PDFStreamForResponsenull writer = hummus.createWriterwriter writer.end Details Denial of Service DoS...