CVE-2026-66752

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

CVE-2026-66752

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

CVE-2026-66752 tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

CVE-2026-66752

CVE-2026-66752 affects tiny-http up to version 0.12.0. The vulnerability stems from HTTP request handling where Transfer-Encoding is parsed inconsistently, causing the library to unconditionally apply chunk-decoding while Content-Length may be ignored. This mismatch between tiny_http’s parsing an...

CVE-2026-66752 tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

EUVD-2026-49881

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

CVE-2026-66752 tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

CVE-2026-13874

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498411773...

CVE-2026-13944

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513224212...

CVE-2026-13990

An insufficient validation of untrusted input flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514058439...

GoAnywhere Managed File Transfer Login Panel - Detect

GoAnywhere Managed File Transfer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GoAnywhere Managed File Transfer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WS_FTP Server Web Transfer - Panel Detect

WSFTP Server Web Transfer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WSFTP Server Web Transfer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WSFTP Server Web Transfer - Pan...

TIBCO Managed File Transfer - Panel Detection

TIBCO Managed File Transfer Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO Managed File Transfer Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO Manag...

Web Transfer Client Login Panel - Detect

Progress Web Transfer Client login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Progress Web Transfer Client login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Transfer...

Accellion - Detect

Dectection of Accellion File Transfer Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Dectection of Accellion File Transfer Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accellion - Detect',...

WS-FTP Ad Hoc Transfer Panel - Detect

WSFTP Ad Hoc panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WSFTP Ad Hoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WS-FTP Ad Hoc Transfer Panel - Detect', 'description':...

WS_FTP Server - Insecure Deserialization Detection

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. !/usr/bin/env python3 -- coding: utf-8 -- """In WSFTP Serve...

FileCatalyst File Transfer Solution - Detect

Detects the presence of FileCatalyst file transfer solution login panel !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of FileCatalyst file transfer solution login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Moveit File Transfer - Detect

Detects Moveit File Transfer - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Moveit File Transfer - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Moveit File Transfer - Detect', 'description'...

CVE-2026-18028

The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed reque...