Node.js llhttp 模块 HTTP 请求走私漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCE
• FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞（CVE-2026-46442）
• Drupal core /jsonapi/node/article SQL 注入漏洞（CVE-2026-9082）
• PoCNode-RED /auth/token 默认口令漏洞
• Vite Dev Server /node_modules/.vite/deps 文件读取漏洞 （CVE-2026-39365）
• PoCnode-red-unauth: Node-RED - Unauthenticated Access
• NocoBase /api/flow_nodes:test 代码执行漏洞（CVE-2026-34156）
• 天锐绿盘云文档安全管理平台/lddsm/service/../ldfbsnodeDocumentController/restorMachineToClient.do 命令执行漏洞
• Node-Tar Node-Tar 未授权 路径遍历漏洞
• ComfyUI /api/customnode/install/git_url 代码执行漏洞（CVE-2025-67303）
• PoCnode-repl-history-disclosure: Node.js REPL History Disclosure
• PoCaem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node Creation