45209 matches found
nextjs-cve-2025-29927
Next.js CVE-2025-29927 Middleware Vulnerability This repository is a monorepo project that allows you to compare the CVE-2025-29927 middleware vulnerability between Next.js versions 15.2.3 and 15.1.7. Vulnerability Description CVE-2025-29927 is a security vulnerability discovered in Next.js...
vulnerabilidad-LibWebP-CVE-2023-41064
vulnerability-LibWebP-CVE-2023-41064 code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP an image format file with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...
decode-spam-headers
decode-spam-headers.py Ya sea que estĆ©s tratando de entender por quĆ© un correo electrĆ³nico especĆfico terminĆ³ en SPAM/Correo no deseado para tus tareas administrativas diarias o para tus propĆ³sitos de simulaciĆ³n de phishing Red-Team, Ā”este script estĆ” ahĆ para ayudarte! La idea surgiĆ³ al realizar...
CVE-2017-1000486
CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...
CVE-2025-29927
CVE-2025-29927 Next.js Middleware Authorization Bypass The detection template for CVE-2025-29927 is now officially part of the Nuclei Templates repository. https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-29927-HEADLESS.yaml A critical vulnerability in...
vulnerability_struts-2.3.31
vulnerabilitystruts-2.3.31 Build the struts-2.3.31 CVE-2017-5638 environment. https request is possible. environment Ubuntu 20.04 Docker 20.10.12 curl 7.68.0 Server Startup We will use the tomcat:7.0-jre8 docker image. Unzip struts-2.3.31.zip in a directory of your choice. cd struts-2.3.31 sudo...
Shellshock
Shellshock Exploit CVE-2014-6271 Exploit Description This repository contains an exploit for a vulnerability that affects unix-based systems. Please note that this is merely a proof-of-concept script created for educational purposes and should be used responsibly. This exploit is designed to...
CVE-2025-29927
CVE-2025-29927 - Next.js Middleware 15.2.2 - Authorization Bypass ā ļø Critical Authentication Bypass in NextJS Middleware š ļø PoC implementation by @zs1n š” Overview NextJS is a popular React-based web framework, has an authentication vulnerability that affects versions prior to 12.3.5, 13.5.9,...
CVE-2026-100700
nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-text fallback regex pattern that exhibits quadratic backtracking behavior. Attackers can supply crafted email header values with long whitespace-free runs to block the Node.js event loop for tens of...
CVE-2026-100664
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean ā...
CVE-2026-100659
Netty's HTTP/3 codec io.netty:netty-codec-http3 in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority pseudo-header field and a literal host header field, when both present, carry the same value. A remote unauthenticated peer can send a single...
CVE-2026-100664
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean ā...
UBUNTU-CVE-2026-100659
Netty's HTTP/3 codec io.netty:netty-codec-http3 in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority pseudo-header field and a literal host header field, when both present, carry the same value. A remote unauthenticated peer can send a single...
UBUNTU-CVE-2026-100664
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean ā...
CVE-2026-100700
A flaw was found in nodemailer. An inefficient regular expression within the address parser component is susceptible to excessive backtracking when evaluating untrusted input. A remote attacker can exploit this vulnerability by submitting crafted email header values containing long text sequences...
CVE-2019-11287
CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...
EUVD-2026-87673
nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-text fallback regex pattern that exhibits quadratic backtracking behavior. Attackers can supply crafted email header values with long whitespace-free runs to block the Node.js event loop for tens of...
EUVD-2026-87758
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean ā...
CVE-2026-100664 Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean ā...
CVE-2026-100664 Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean ā...