974 matches found
Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner WCVS est un scanner CLI rapide et polyvalent pour l'empoisonnement du cache web et la tromperie du cache web développé par Hackmanit et Maximilian Hildebrand. Le scanner prend en charge de nombreuses techniques d'empoisonnement du cache web et de tromperie du cache...
param-miner
param-miner Cette extension identifie les paramètres cachés et non liés. Elle est particulièrement utile pour trouver des vulnérabilités d'empoisonnement du cache web. Elle combine la logique de différenciation avancée de Backslash Powered Scanner avec une technique de recherche binaire pour...
squid
Cache proxy Web SQUID http://www.squid-cache.org/ Copyright C 1996-2026 La Fondation Squid Software et les contributeurs Le logiciel Squid est distribué sous licence GPLv2+ et comprend des contributions de nombreux individus et organisations. Veuillez consulter les fichiers COPYING et CONTRIBUTOR...
fockcache
fockcache FockCache - Test d'empoisonnement de cache minimalisé Détails sur l'empoisonnement de cache : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tente de provoquer un empoisonnement de cache en essayant les en-têtes X-Forwarded-Host et X-Forwarded-Scheme...
Airachnid-Burp-Extension
Web Cache Deception Burp Extension Une extension Burp pour tester les applications contre la vulnérabilité de l'attaque Web Cache Deception. Une fois l'extension chargée, elle est accessible dans l'onglet Target - Sitemap en faisant un clic droit sur la ressource à tester. Un élément de menu...
CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter
CVE-2026-11101 – Отравление HTTP-кэша через неключевой параметр запроса Обзор Веб-кэш использует только путь URL в качестве ключа кэша, игнорируя параметры запроса. Злоумышленник может добавить вредоносную полезную нагрузку к неключевому параметру например, utmcampaign и отравить кэш. Последующие...
CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777970333)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777970333 advisory. - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before...
Amazon Linux 2023 : squid (ALAS2023-2026-3145)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3145 advisory. Due to a CWE-841 Improper Enforcement of Behavioral Workflowbug Squid is vulnerable to a Request Smuggling attack againstHTTP/1.1 Transfer-Encoding. This problem allows a trusted client to perform an...
Amazon Linux 2 : squid (ALAS-2026-3961)
The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3961 advisory. Due to a CWE-841 Improper Enforcement of Behavioral Workflowbug Squid is vulnerable to a Request Smuggling attack againstHTTP/1.1...
CVE-2026-15396
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
CVE-2026-15634
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
CVE-2026-15396
CVE-2026-15396 affects IBM WebSphere Application Server (traditional 8.5 and 9.0) and IBM WebSphere Application Server Liberty (versions 17.0.0.3–26.0.0.8). The root cause is improper parsing of the HTTP transfer-encoding request header (CWE-444), enabling HTTP request smuggling . An unauthentica...
CVE-2026-15396 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
EUVD-2026-78068
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
CVE-2026-15634 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
Astra Linux – Vulnerability in python-django, python2.7
Packages containing “python/cpython” from versions 0 and earlier, including 3.6.13, 3.7.0 and earlier than 3.7.10, 3.8.0 and earlier than 3.8.8, 3.9.0 and earlier than 3.9.2 are vulnerable to Web Cache Poisoning via “urllib.parse.parseqsl” and “urllib.parse.parseqs”. This vulnerability occurs due...
Astra Linux – Vulnerability in python-bottle
Packages from versions 0 and before 0.12.19 are vulnerable to Web Cache Poisoning, due to a mechanism called “parameter cloaking”. When attackers can separate query parameters using a semicolon ;, they can create a discrepancy in the interpretation of requests between the proxy running with defau...
Astra Linux – Vulnerability in Squid
In versions 4.14 and 5.x through 5.0.5, in some configurations, the Squid vulnerability allows information disclosure due to an out-of-bounds read in the WCCP protocol data. This vulnerability can be exploited as part of a chain for remote code execution, as there is no one to stop such attacks...
CVE-2026-15634: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
