漏洞描述
Node.js中存在一个HTTP请求走私漏洞，该漏洞是由于传入请求中HTTP头字段的分隔符不当造成的。
Node.js llhttp HTTP请求走私漏洞
PoC代码
暂无相关漏洞推荐
- POC node-repl-history-disclosure: Node.js REPL History Disclosure
- vulhub httpd apache 解析漏洞
- POC aem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node Creation
- POC cl-te-http-smuggling: Basic CL.TE - HTTP request smuggling
- POC te-cl-http-smuggling: Basic TE.CL - HTTP Request Smuggling
- NodeBB /api/v3/search/categories SQL 注入漏洞（CVE-2025-50979）
- Node.js调试模式 远程代码执行漏洞
- POC CVE-2001-0537: Cisco IOS HTTP Configuration - Authentication Bypass
- POC CVE-2006-1681: Cherokee HTTPD <=0.5 - Cross-Site Scripting
- POC CVE-2014-2323: Lighttpd 1.4.34 SQL Injection and Path Traversal
- POC CVE-2014-3744: Node.js st module Directory Traversal
- POC CVE-2017-14849: Node.js <8.6.0 - Directory Traversal
- POC CVE-2017-15715: Apache httpd <=2.4.29 - Arbitrary File Upload