687 matches found
CVE-2026-21850
HCL AION is affected by a vulnerability involving the improper neutralization of CR/LF characters in HTTP response headers. An attacker could provide user-controlled input that is included in these headers without proper sanitization, potentially enabling header injection or response splitting . ...
EUVD-2026-118263
HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper neutralization of CR/LF characters. This may allow an attacker to inject headers or split responses, potentially resulting in unintended behavior or security impact under...
CVE-2026-21850 HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper neutralization of CR/LF characters. This may allow an attacker to inject headers or split responses, potentially resulting in unintended behavior or security impact under...
CVE-2026-21850: HCL Software HCL AION: HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers withoutβ¦
HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper neutralization of CR/LF characters. This may allow an attacker to inject headers or split responses, potentially resulting in unintended behavior or security impact under...
pfsense-pppoe-secret-bang
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· pfsense-pppoe-secret-bang pfsense-pppoe-secret-bang Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Username charset allows CR/LF. Password ! strip 10275 ltrims a leading ! off the password...
shiro-cve-2022-32532
Apache Shiro CVE-2022-32532 Reproduction Environment This is a minimal web application for reproducing CVE-2022-32532 Apache Shiro RegExPatternMatcher authentication bypass. Vulnerability Description CVE : CVE-2022-32532 Affected versions : Shiro 1.9.1 Cause : RegExPatternMatcher does not properl...
CVE-2022-22978-PoC
CVE 2022-22978: Authorization Bypass in RegexRequestMatcher π₯Ά Overview According to the information I have gathered, this vulnerability is related to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...
openSUSE 16: stgit / stgit-bash-completion / stgit-emacs / stgit-fish-completion / etc (openSUSE-SU-2026:22204-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22204-1 advisory. Changes in stgit: - Update to version 2.7.0: Allow unambiguous command shorthands, opt-in with stgit.infer-commands. Accept git approxidate...
TP-Link-Archer-CR-700-XSS-Exploit
TP-Link-Archer-CR-700-XSS-Exploit Exploiting TP-Link Archer CR-700 Router. Responsibly Disclosed to TP-Link Step 1- On you linux machine Kali or Ubuntu type the following command gedit /etc/dhcp/dhclient.conf Comment out the line below send host-name = gethostname; Copy it to the line below it an...
CVE-2026-119415
CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME part headers via unsanitized Content-Type and Content-ID values. Attackers can supply CR/LF sequences in attachment MIME types or Content-IDs passed to Message::setAttachments or...
Security update for stgit (important)
openSUSE security update: security update for stgit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22204-1 Rating: important References: bsc1262997 bsc1281742 bsc1285176 Cross-References: CVE-2026-109349 CVE-2026-109350 CVE-2026-109351 CVE-2026-919...
cve-2025-48384-poc
PoC for CVE-2025-48384 This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules. β οΈ Warning This is for educational and testing purposes only. Do not run this on any production environment. π§ͺ Usag...
PT-2026-133468
CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME part headers via unsanitized Content-Type and Content-ID values. Attackers can supply CR/LF sequences in attachment MIME types or Content-IDs passed to Message::setAttachments or...
OPENSUSE-SU-2026:22204-1 Security update for stgit
This update for stgit fixes the following issues: Changes in stgit: - Update to version 2.7.0: Allow unambiguous command shorthands, opt-in with stgit.infer-commands. Accept git approxidate spellings for dates, e.g. "2 days ago" and "@"; relative dates are now anchored in the local time zone. Run...
CVE-2026-115303
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted field values before concatenating them into outgoing email headers when a form is configured to map a submitted field into its Reply-To, From or Cc header, allowing unauthenticate...
EUVD-2026-112675
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted field values before concatenating them into outgoing email headers when a form is configured to map a submitted field into its Reply-To, From or Cc header, allowing unauthenticate...
PT-2026-130670
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted field values before concatenating them into outgoing email headers when a form is configured to map a submitted field into its Reply-To, From or Cc header, allowing unauthenticate...
CVE-2025-60876
CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...
Twisted: HTTP Request Smuggling In Twisted.web Via A Bare CR Or LF In A Header Value
Summary An incomplete header-value validation CWE-444 in the Twisted HTTP server lets a bare carriage return or line feed in a header value hide a following header from the parser. "twisted.web.http.HTTPChannel.headerReceived" rejects a NUL byte in a header value but not a bare CR or LF, even...
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Summary An incomplete header-value validation CWE-444 in the Twisted HTTP server lets a bare carriage return or line feed in a header value hide a following header from the parser. twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in a header value but not a bare CR or LF, even thoug...