CVE-2025-4476-Exploit

CVE-2025-4476-Exploit A small Python test client to send HTTP GET requests with an oversized Authorization: Basic header. This tool is intended for lab testing and research into header-parsing issues e.g., null-dereference / crash bugs such as CVE-2025-4476 in libsoup. It demonstrates how a...

CVE-2026-20218 Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due...

CVE-2026-20218 Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due...

CVE-2026-20218

A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine exists across multiple Cisco products . The flaw stems from improper range checking during the decompression of user-controlled VBA data. An unauthenticated, remote attacker can exploit this by sending crafted...

CVE-2026-114470 Cross-Site Request Forgery (CSRF) in hMailServer

Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a brows...

CVE-2026-114470

Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to a Cross-Site Request Forgery (CSRF) in the REST API . The root cause is that while the API protects cookie-based sessions, it does not apply the same protections to HTTP Basic authentication . Because browsers cache Basi...

EUVD-2026-107313

Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a brows...

CVE-2026-114470 Cross-Site Request Forgery (CSRF) in hMailServer

Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a brows...

Shiro-basic

Shiro-basic This is a simple Shiro-basic project .Just for pentest env...

PT-2026-120648

Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-changing request. The REST API accepts HTTP Basic authentication and answers a browser with a Basic sign-in box; a brows...

Synology-DiskStation-User-Enumeration-CVE-2017-9554-

Synology DiskStation User Enumeration CVE-2017-9554 Basic script to enumerate valid users on Synology DiskStation v6.1.3-15152...

CVE-2026-85251

A flaw was found in the Apache Camel HTTP component. This flaw leads to information disclosure when the component is configured to automatically follow HTTP redirects. The client improperly forwards sensitive authentication credentials, such as OAuth bearer tokens and basic authentication...

ROOT-APP-NPM-AIKIDO-2026-424618 AIKIDO-2026-424618 in basic-ftp - Patched by Root

Root has patched AIKIDO-2026-424618 in the basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-6V7Q-WJVX-W8WG GHSA-6v7q-wjvx-w8wg in basic-ftp - Patched by Root

Root has patched GHSA-6v7q-wjvx-w8wg in the basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-102990 CVE-2026-102990 in basic-ftp - Patched by Root

Root has patched CVE-2026-102990 in the basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41324 CVE-2026-41324 in basic-ftp - Patched by Root

Root has patched CVE-2026-41324 in the basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in basic-ftp - Patched by Root

Root has patched CVE-2026-44240 in the basic-ftp package for Root:npm. Multiple fixed versions available...

CVE-2026-85251

The Apache Camel HTTP component (versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1) contains a credential disclosure vulnerability when followRedirects=true. The root cause involves two paths where credentials—including OAuth2 Bearer tokens , Basic , and Digest credentials—are re-attached to redirect...

CVE-2026-112041

A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryptographically weak prng. The attack may be performed from...

EUVD-2026-104044

A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryptographically weak prng. The attack may be performed from...