EUVD-2026-87835

In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files excluded from On-Demand-enabled playlists. Attackers can bypass the station operator's intended access restrictions by directly...

h2csmuggler

h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...

EUVD-2026-87753

Netty's HTTP/3 codec io.netty:netty-codec-http3 in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority pseudo-header field and a literal host header field, when both present, carry the same value. A remote unauthenticated peer can send a single...

CVE-2018-11759

CVE-2018-11759 概念実証 説明 Apache Tomcat JK modjk コネクタ 1.2.0 から 1.2.44 において、Apache Web Server httpd が要求されたパスを正規化し、それを URI-worker マップにマッチさせる前に特定のエッジケースを正しく処理していなかったコードがあります。Tomcat がサポートする URL のサブセットのみが httpd...

Forbidden-Buster

Forbidden Buster는 HTTP 401 및 403 응답 코드를 우회하고 시스템의 무단 영역에 접근하기 위해 다양한 기술을 자동화하도록 설계된 도구입니다. 이 코드는 보안 애호가와 전문가만을 위해 만들어졌습니다. 사용에 따른 책임은 본인에게 있습니다. 기능 HTTP 401 및 403 응답 코드를 프로브하여 잠재적인 우회 기술을 발견합니다. 다양한 방법과 헤더를 활용하여 액세스 제어를 테스트하고 우회합니다. 명령줄 인수를 통해 사용자 지정이 가능합니다. 🚀 업데이트 다양한 API 버전을 프로브하고 데이터를 변조하는 API...

CVE-2026-100550 OpenClaw before 2026.8.1 Authentication Bypass via Access Group

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

EUVD-2026-87500

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

LolLMS <= 2.2.0 - Unauthenticated File Upload

A vulnerability in parisneo/lollms up to and including version 2.2.0 allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. The endpoint lacks the Dependsgetcurrentactiveuser dependency used by other file-related APIs. id: CVE-2026-0558 info: name:...

Symfony HttpFoundation - Access Control Bypass via PATH_INFO

Symfony HttpFoundation component = 2.0.0 and prior to versions 5.4.50, 6.4.29, and 7.3.7 contains an access control bypass vulnerability. The Request class improperly interprets some PATHINFO values, producing URL paths without a leading /. This allows bypassing access control rules that are buil...

nomore403

NoMore403 nomore403은 401, 403 및 관련 응답을 중심으로 HTTP 접근 제어 우회 및 파서 불일치를 테스트하기 위한 명령줄 도구입니다. 이 도구는 실무 웹 보안 작업버그 바운티, 침투 테스트, 보안 검토, 접근 제어 규칙 회귀 테스트을 위해 설계되었습니다. 광범위한 요청 변형 세트를 자동화하고, 기준선을 캡처하며, 일반적인 오탐지를 필터링하고, 의미 있는 우회 가능성이 가장 높은 응답을 강조합니다. 기능 대상 URL이 주어지면 nomore403은: 1. 기준 요청을 보내 차단된 응답을 캡처합니다. 2...

CVE-2026-91768

A flaw was found in PHP. The access control check for Internet Protocol version 6 IPv6 addresses in the FastCGI implementation compares only the first 12 bytes of a 16-byte address instead of the complete address. An attacker on an adjacent network with an address sharing the first 96 bits with a...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling 教育目的のみ セットアップ root@kitploit: $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 テスト /admin が拒否されることを確認します。 root@kitploit: $ curl...

[SECURITY] [DSA 6514-1] php8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6514-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2026 https://www.debian.org/security/faq -...

CVE-Requests-1896609

CVE リクエスト 1896609 - feiskyer/mcp-kubernetes-server エグゼクティブサマリー このレポートは、feiskyer/mcp-kubernetes-server パッケージで発見された 2 つの重大なセキュリティ脆弱性について詳述します。デプロイ時、サーバーは Kubernetes クラスターへの限定的かつ安全なアクセスを提供することを目的とした MCP ツール kubectl を公開します。しかし、入力検証が不十分なため、2 つの異なる攻撃経路が可能になります： OS コマンドインジェクション: 攻撃者はシェルのメタ文字（例:...

CVE-2026-67241

A flaw was found in rabbitmq-server. This vulnerability allows an authenticated user to bypass access controls and perform unauthorized message routing. When an exchange is declared via the Advanced Message Queuing Protocol AMQP 1.0 management interface, the application fails to verify write...

cve-2022-31813

CVE-2022-31813 脆弱性チェッカー 作者 : Derek Odiorne GitHub : @dodiorne バージョン : 1.2 最終更新日 : May 21, 2025 MITRE ATT &CK 手法: T1190 – 公開アプリケーションの悪用 🧠 説明 このツールは、modproxy と ProxyPassMatch を使用する Apache HTTP Server ≤ 2.4.53 におけるパストラバーサルおよびアクセス制御バイパスの脆弱性 CVE-2022-31813 を検出するためのブラックボックス脆弱性スキャナ です。...

CVE-2023-25690

CVE-2023-25690 CVE-2023-25690の説明: Apache HTTP Server バージョン 2.4.0 から 2.4.55 における modproxy の特定の設定は、HTTP Request Smuggling（1人または複数のユーザーから受信したHTTPリクエストチェーンをWebサイトが処理するプロセスに干渉する攻撃手法）を許容します。 これらの設定は、modproxy が特定の RewriteRule または ProxyPassMatch...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. 脆弱性の概要 CVE-2025-30208、CVE-2025-31125、CVE-2025-31486 は、Vite 開発サーバーにおける任意ファイル読み取りの脆弱性です。この脆弱性により、攻撃者は特定の URL パラメータを通じてアクセス制御を回避し、fs モジュールを介してサーバー上の機密ファイルを読み取ることができます。上記の 3 つの脆弱性は、原因が非常に似ているため、1 つのシリーズの脆弱性と見なすことができます。 CVE-2025-30208...