EUVD-2026-71518

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

CVE-2024-26144-test

CVE-2024-26144-test 要求： Docker compose Deno $ deno run --allow-run --allow-net check.ts 如果想测试 CDN，请在参数中设置 URL。 （确保运行前清除所有缓存！） $ deno run --allow-run --allow-net check.ts https://example.com/ 结果 如果 HTTP 响应包含 Set-Cookie 头... Web 服务器| 响应已缓存（1）| 缓存包含 Set-Cookie ---|---|--- Nginx + proxycache| 否| -...

CVE-2022-0155-PoC

CVE-2022-0155 概念验证 PoC 该仓库包含对 CVE-2022-0155 漏洞的演示。 该漏洞由 ranjit-git 发现，并在 此处 详细描述。 本 PoC 的目的是展示该漏洞不仅适用于将 follow-redirects 用作直接依赖的场景，也适用于通过 axios 将其用作间接/传递依赖的场景。 概述 该漏洞影响版本低于 1.14.7 的 follow-redirects npm 包。Follow-redirects 扩展了 内置 HTTP 模块，增加了跟随重定向的能力。 为了演示该漏洞，请考虑以下场景： 1. follow-redirects 被用于向...

misfortune-cookie

Suite de PoC para CVE-2014-9222 "Misfortune Cookie" Desbordamiento de pila en el manejo de cookies HTTP de AllegroSoft RomPager todas las versiones 4.34. Una única solicitud no autenticada con una cabecera Cookie: manipulada corrompe la memoria. Efectos: bypass de autenticación de administrador,...

CVE-2026-49975

CVE-2026-49975 Bomba HTTP/2 ★ CVE-2026-49975 PoC de Bomba HTTP/2 ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Resumen CVE-2026-49975 es una vulnerabilidad de Denegación de Servicio DoS en Apache HTTP Server. La vulnerabilidad ocurre en la ruta de manejo de...

CVE-2018-5767-AC9

Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a...

CVE-2018-9995-EXPLOIT

CVE-2018-9995 - Bypass de Autenticación en DVR Este repositorio aborda la vulnerabilidad de seguridad identificada como CVE-2018-9995, que afecta a varios dispositivos DVR, incluyendo TBK DVR4104, DVR4216, Novo, CeNova, QSee, Pulnix, XVR 5 en 1, Securus, Night OWL, DVR Login, HVR Login y MDVR...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 概念验证的实现 以下是 CVE-2018-5767 的复现，该漏洞利用解析 Cookie 头中密码时未受保护的 sscanf 调用来实施攻击。该漏洞最初在 AC15 型号路由器中被发现并报告，但后来在同一产品线的多款路由器中也被发现。本实现针对 AC9 型号，该型号目前未被任何 CVE 覆盖。已知可在该路由器上使用的 libc 基址为 0x2ad6d000。 更多信息请参见： https://vulners.com/cve/CVE-2018-5767...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Omisión de Autenticación y RCE mediante usuario nulo CVE-2026-19900 Credenciales fijas y omisión de autenticación RCE mediante usuario nulo. Omisión mediante cabecera: Cookie:user=null Uso Compila y ejecuta el script con un host objetivo: go build cve-2026-19900-PoC.g...

TBK DVR4104/DVR4216 Devices - Authentication Bypass

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html logo.gif se eliminará...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Aviso de seguridad: División de respuesta HTTP mediante valores de cabecera de respuesta no validados rouille ID de CVE asignado: CVE-2026-66746 Resumen rouille escribe los valores de las cabeceras de respuesta al cliente sin comprobar si contienen retorno de carro o salto de línea. Una aplicació...

CVE-2026-86250

A flaw was found in h3. This vulnerability allows a remote attacker to send a specially crafted cookie header with an excessively large chunk count. This action triggers an inefficient cleanup process within the setChunkedCookie and deleteChunkedCookie functions, consuming significant server...

CVE-2026-82209

A flaw was found in libcurl when libpsl support is enabled. A remote attacker could exploit this vulnerability by setting a Set-Cookie header with a Domain attribute that explicitly matches a public suffix. This improper handling causes libcurl to save the cookie with a wildcard domain scope,...

CVE-2026-92790

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...

EUVD-2026-81053

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...

CVE-2026-92790 Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...