Search Vulnerabilities

Libsoup: libsoup: http request smuggling via duplicate content-length headers

HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

Apache Tomcat: Request smuggling via invalid chunk extension

Tinyproxy HTTP request parsing desynchronization via case-sensitive Transfer-Encoding handling

Apache Traffic Server: Malformed chunked message body allows request smuggling

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

AIOHTTP: Duplicate Host header accepted

cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Undertow: undertow: request smuggling via malformed http request headers

Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator

Undertow: undertow: request smuggling via inconsistent header parsing

HTTP Request Smuggling in visualfc/liteide

Next.js: HTTP request smuggling in rewrites

Request smuggling via first-wins Content-Length parsing in inets httpd

undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Cap'n Proto: Integer overflow in KJ-HTTP chunk size