CVE-2026-104380 Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in psserveone. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

CVE-2026-104380 Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in psserveone. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

EUVD-2026-92915

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in psserveone. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

PT-2026-107252

CVE-2026-85985: Authorization bypass in the CONNECT engine of @mariadb Server, the open-source database with 8.3k GitHub stars. UDFs like json file and jfile make read and write files without checking the FILE privilege or secure file priv. A low-privileged SQL account reaches any file the MariaD...

PT-2026-107187

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The OAuth2 and OpenID Connect sign-in paths fail to require a WebAuthn challenge when WebAuthn is the only configured second factor for an account. This allows an attacker who can authenticate...

PT-2026-106299

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps serve one. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

PT-2026-106681

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted The client borrows shared CQ credits in the ADDR RESOLVED handler via ib cq pool get, before the peer is connected. create cm can return -ERESTARTSYS from wait event...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 一键WP临时环境与迁移 = 0.1.0.38 - 缺少对未认证API设置/任意选项更新/管理员用户创建的授权...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Script Python de prueba de concepto dirigido a CVE-2023-43208 en Mirth Connect. Aviso legal Úselo únicamente en entornos de los que sea propietario o para los que tenga autorización explícita de prueba. Este repositorio es para investigación de seguridad,...

CVE-2023-43208

CVE-2023-43208 — Mirth Connect 预认证远程代码执行 在 NextGen Healthcare Mirth Connect CVSS 9.8（严重） — CVE-2023-37679 的补丁绕过 概述 Mirth Connect 在 /api/users 端点上使用 Java XStream 库反序列化 XML 负载，无需身份验证 。原始修复（CVE-2023-37679）引入了一个危险类黑名单，但通过使用 Apache Commons Lang3 中的 EventBindingInvocationHandler 结合 Commons Collections4...

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 PoC POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...

mcpjam-cve-2026-23744-validator

MCPJam Inspector 授权安全验证器 一个针对影响易受攻击 MCPJam Inspector 部署的 CVE-2026-23744 的有界概念验证验证器。 该项目是一个独立的、非破坏性的验证工具，用于先前披露的 CVE-2026-23744。它不是原始漏洞披露或漏洞利用。 此仓库旨在供安全专业人员在验证他们拥有或已获得明确书面授权的系统时使用。 重要提示 此验证器通过使目标 MCPJam Inspector 进程执行一个固定的、非交互式的证据命令来确认暴露风险。它不提供通用的漏洞利用框架、shell、后利用工作流、持久化机制、凭据访问例程或权限提升能力。...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect OIDC token endpoint. This leads to high resource consumption and prolonged processing times, ultimate...

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable UTF-16 encodin...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorización faltante para la actualización arbitraria de opciones Suscriptor+ Descripción: El complemento InstaWP Connect – 1-click WP Staging & Migration para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Vulnerabilidad de desbordamiento de búfer basado en pila RCE en Ivanti Connect Secure / Policy Secure / ZTA Gateways CVSS 9.0 — CRÍTICA | Día cero explotado activamente | Descubierto en enero de 2025 Descripción general CVE-2025-0282 es una vulnerabilidad de desbordamiento de búfe...

CVE-2025-0282

PoC para CVE-2025-0282 Un desbordamiento de búfer remoto no autenticado basado en pila que afecta a Ivanti Connect Secure, Ivanti Policy Secure y las puertas de enlace Ivanti Neurons para ZTA Resumen Este es un exploit de prueba de concepto para demostrar la explotación de CVE-2025-0282, y se bas...

ripple20-digi-connect-exploit

Ripple20 漏洞利用：Digi Connect ME 9210 作者：Moshe Kol, Shlomi Oberman 此仓库包含针对 CVE-2020-11896 的概念验证（PoC）利用代码，这是 Track TCP/IP 协议栈中的一个关键堆缓冲区溢出漏洞（属于 Ripple20 漏洞套件）。 该利用代码可在运行 NET+OS 7.5 的 Digi Connect ME 9210 设备上实现远程代码执行（RCE）。完整的分析报告可在此处找到 here。...

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Escáner POC de Explotación en Python para Detectar RCE en Ivanti Connect Secure Este script ayuda a identificar gateways de Ivanti Connect Secure, Policy Secure o ZTA que pueden ser vulnerables a CVE-2025-22457 , un desbordamiento de búfer basado en pila, crítico y ...