cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Contournement d'authentification et RCE via utilisateur nul CVE-2026-19900 Contournement d'authentification et RCE via identifiants codés en dur et utilisateur nul. Contournement via en-tête : Cookie:user=null Utilisation Compiler et exécuter le script avec un hôte...

CVE-2026-107835

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An...

CVE-2026-107835 OWASP Coraza WAF: Cookie Parser Confusion

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An...

EUVD-2026-95930

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An...

DVRFaultNET

DVRFaultNET تطبيق وحدة تحكم .NET يستغل ثغرة DVR CVE-2018-9995 الاستخدام بمجرد التشغيل، سيُطلب منك إدخال عنوان URL لكاميرا DVR. يقوم البرنامج بإضافة ?opt=user&cmd=list إلى عنوان URL ويرسل طلبًا يحتوي على رأس "Cookie:uid=admin" ثم يعيد الخادم سلسلة JSON تحتوي على جميع بيانات اعتماد المستخدمين...

CVE-2026-107714 Mechanize sends credential headers to a different scheme or port after a redirect

The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponseredirect treats redirects as same-origin when the host matches without consistently comparing scheme and port. A same-host HTTPS-to-HTTP redirect can send Authorization and Cooki...

AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)

Impact With the cookie store enabled, which is the default, a Cookie header that the caller sets on a request with setHeader or addHeader is thrown away whenever the store holds any cookie for the request's origin: the request's cookie list is written into that header afterwards and replaces it...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html سيتم حذف logo.gif...

TBK DVR4104/DVR4216 Devices - Authentication Bypass

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

CVE-2026-107228

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the enabled-by-default cookie store replaces a Cookie header explicitly supplied through setHeader or addHeader whenever the store contribut...

CVE-2026-107228

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the enabled-by-default cookie store replaces a Cookie header explicitly supplied through setHeader or addHeader whenever the store contribut...

CVE-2026-107228

The AsyncHttpClient (AHC) library versions 2.1.0 through 3.0.14 contains a vulnerability where the default cookie store silently overrides explicit Cookie headers provided via setHeader or addHeader. In shared client environments, this allows cookies from one user's session to replace another use...

CVE-2026-107228 AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the enabled-by-default cookie store replaces a Cookie header explicitly supplied through setHeader or addHeader whenever the store contribut...

CVE-2026-49975

CVE-2026-49975 قنبلة HTTP/2 ★ CVE-2026-49975 إثبات المفهوم لقنبلة HTTP/2 ★ نظرة عامة CVE-2026-49975 هو ثغرة حرمان من الخدمة DoS في خادم Apache HTTP. تحدث الثغرة في مسار معالجة طلبات HTTP/2، حيث يمكن دمج حقول cookie المتعددة دون أن تُحتسب بشكل صحيح ضمن LimitRequestFields. من خلال إرسال طلب HTTP/2...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

استشارة أمنية: حقن استجابات HTTP عبر قيم ترويسات استجابة غير مُتحقق منها rouille معرّف CVE المخصص: CVE-2026-66746 الملخص تكتب rouille قيم ترويسات الاستجابة إلى العميل دون التحقق منها من وجود حرف إرجاع السطر أو تغذية السطر. أي تطبيق يضع نصًا متأثرًا من المهاجم في قيمة ترويسة، فإنه يُصدر ترويسات...

misfortune-cookie

Suite de PoC pour CVE-2014-9222 « Misfortune Cookie » Débordement de pile dans la gestion des cookies HTTP d'AllegroSoft RomPager toutes les versions 4.34. Une seule requête non authentifiée avec un en-tête Cookie: forgé corrompt la mémoire. Effets : contournement de l'authentification admin,...

CVE-2026-49975

CVE-2026-49975 قنبلة HTTP/2 ★ CVE-2026-49975 قنبلة HTTP/2 إثبات المفهوم ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 نظرة عامة CVE-2026-49975 هي ثغرة رفض الخدمة DoS في خادم Apache HTTP. تظهر الثغرة في مسار معالجة طلبات HTTP/2، حيث يمكن دمج عدة حقول ترويسة cook...

CVE-2018-5767-AC9

البحث والمؤلف David Baker مقالة: أحيانًا تحتاج الاستغلالات إلى تصحيحات أيضًا! العمل من خلال تغيير العنوان رابط خارجي CVE-2018-5767-AC9 The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a...

Astra Linux – Vulnerability in python-urllib3

urllib3 is a user-friendly HTTP client library for Python. urllib3 does not treat the Cookie HTTP header specially or provides any helpers for managing cookies over HTTP; that responsibility lies with the user. However, it is possible for a user to specify a Cookie header, and information may be...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 Une implémentation d'une preuve de concept pour CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a password. The...