CVE-2025-29927

CVE-2025-29927 - Demo for Introdcution to Secure Programming 00960267 Background This is a demo of CVE-2025-29927, a critical vulnerability in Next.js that allowed bypassing the middleware with a certain header. The header x-middleware-subrequest was intended to prevent infinite middleware loops...

Jatayu

JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE GET /test/jatayu.php?fn=1&&cmd=whoami Host : http://test.com Authtoken : bb3b1a1f-0447-42a6-955a-88681fb88499 FUNCTIONS PARAMETER| FUNCTION ---|---...

CustomHeader

Custom Header - Automatic Add New Header To Entire BurpSuite HTTP Requests. Download releases: https://github.com/mirfansulaiman/CustomHeader/releases/ This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite Scanner, Intruder, Repeater, Proxy...

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and bypass authentication. GET /admin HTTP/1.1...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - SSRF via Host Header Injection -orange Summary A Server-Side Request Forgery SSRF vulnerability exists in the Xiaomi Mi Router 4A Gigabit Edition. The router's web interface fails to validate the HTTP Host header, allowing an unauthenticated attacker ...

CVE-2024-39929

CVE-2024-39929 PoC Vulnerability Brief Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users. How does this...

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC Lab for CVE-2025-32421 – Next.js Race Condition Cache Poisoning Simulation CVE-2025-32421 Lab – Next.js Race Condition Cache Poisoning This lab reproduces the behavior described in CVE-2025-32421 through a simulation of race condition +...

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 Release Date 2017-03-07 Hazard Level High AV:N/AC:L/Au:N/C:C/I:C/A:C Affected Products Apache Struts =2.3.5, =2.5, CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value...

EUVD-2026-107702

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...

EUVD-2026-107703

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce resend action. rcubemime::decodeaddresslist did not strip control characters from the decoded display name, so a received message whose From display-name carries CRLF sequence...

EUVD-2026-107808

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail::extractinlineimages used the media type taken from an inline image data URI without validating it, so a remote authenticated attacker could inject arbitrary MIME part heade...

EUVD-2026-107809

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The subject of the forwarded message was used verbatim to generate the attachment name, so a received message whose subject contains CRLF...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - ACL Bypass Overview This project demonstrates CVE-2021-40346 , a critical integer overflow vulnerability in HAProxy that enables HTTP Request Smuggling attacks to bypass security controls. CVSSv3 Score: 7.5 High Contributors: 1. Boian Eduard 2...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

CVE-2022-1388

CVE-2022-1388 POC for CVE-2022-1388 affecting multiple F5 products. Follow the Horizon3.ai Attack Team on Twitter for the latest security research: Horizon3 Attack Team James Horseman Zach Hanley Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit | || | \ / / | / | | | | Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation -...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — Root Cause Analysis A client-controlledHost header as a root-group backdoor in the AXIS OS VAPIX Device Configuration framework. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications disclosed CVE-2025-0324 on 2025-06-02 as a critical CVSS 9.4 privilege-escalation flaw in th...

HBSQLI

HBSQLI: Automated Tester For Header Based Blind SQL Injection HBSQLI is an automated command-line tool for performing Header Based Blind SQL injection attacks on web applications. It automates the process of detecting Header Based Blind SQL injection vulnerabilities, making it easier for security...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation - NTFS Alternate Data Streams...