HAProxy-CVE-2023-45539-PoC

HAProxy-CVE-2023-45539-PoC HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server. What gets misroute...

CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsanitized warp:// URI scheme handler. Full writeup at 0day.gg. Summary Property| Value ---|--- CVE| CVE-2024-41997 Vulnerability| Command Injection CWE-77 Target| Warp Terminal macOS Affected| v0.2024.07.16.08.02 Impact| Arbitrary command...

CVE-2021-36749

CVE-2021-36749 Apache Druid Arbitrary File Read Affected versions: version = 0.21.1 Either of the following two methods can be used Command Line Method curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

CLSA-2026-1791629263 TuxCare security update for fast-uri (3 CVEs)

TuxCare rebuilt fast-uri to address 3 CVEs. Fixed in 3.1.0-tuxcare.2...

CLSA-2026-1791627179 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.0.1-tuxcare.6...

CLSA-2026-1791626480 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.0.3-tuxcare.5...

CVE-2014-6271

EXPLOIT FOR CVE-2014-6271 USAGE : CVE-2014-6271.py full path to target uri command...

CVE-2025-55763

CVE-2025-55763 Buffer Overflow in the URI parser of CivetWeb 1.16 latest release as of yet. Vulnerable code The crash occurs here in src/civetweb.c during the last strcat marked. Fix See the pull request. PoC The PoC crashes the server performing an heap overflow, however it is possible to achiev...

PoC_CVE-2024-28157

CVE-2024-28157 - Stored XSS in Jenkins GitBucket Plugin GitBucket URL: javascript:alert77 3. Save, then visit the project page 4. Alert fires with 49 77 Screenshots are in poc/screenshots/ References NVD https://nvd.nist.gov/vuln/detail/CVE-2024-28157...

CLEANSTART-2026-OU85538 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-PV08936 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-BZ85863 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-US61275 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-SN03087 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

CLEANSTART-2026-BC80499 In Eclipse Jetty, an HTTP URI of this form: /public;/

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...

CVE-2026-9086-poc

CVE-2026-9086: Keycloak URI Scheme Validation Bypass XSS PoC 日本語版 Overview This repository contains a Proof of Concept PoC for CVE-2026-9086 , a Cross-Site Scripting XSS vulnerability in Keycloak client URI validation. Vulnerable Keycloak versions compared the prohibited javascript: and data:...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-21933 DESCRIPTION: Java SE could allow a remote attacker to bypass security controls and perform unauthorized update, insert, delete, or read operations on...

CVE-2026-79650

The Apache CXF OIDC relying-party component is vulnerable to an open redirect (CWE-601) where users can be redirected to an attacker-controlled URL after successful authentication. The root cause is that attacker-controlled state parameters are preserved and used as redirect targets without verif...

CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user

Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...

CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)

Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...