EUVD-2026-71518

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

CVE-2022-0155-PoC

CVE-2022-0155 Proof-of-Concept PoC This repository contains a demonstration of the CVE-2022-0155 vulnerability. The vulnerability was detected by ranjit-git and is described in detail here. The purpose of this PoC is to demonstrate that the vulnerability doesn't just apply to scenarios where...

misfortune-cookie

Suite de PoC para CVE-2014-9222 "Misfortune Cookie" Desbordamiento de pila en el manejo de cookies HTTP de AllegroSoft RomPager todas las versiones 4.34. Una única solicitud no autenticada con una cabecera Cookie: manipulada corrompe la memoria. Efectos: bypass de autenticación de administrador,...

CVE-2026-49975

CVE-2026-49975 Bomba HTTP/2 ★ CVE-2026-49975 PoC de Bomba HTTP/2 ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Resumen CVE-2026-49975 es una vulnerabilidad de Denegación de Servicio DoS en Apache HTTP Server. La vulnerabilidad ocurre en la ruta de manejo de...

CVE-2018-5767-AC9

Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a...

CVE-2018-9995-EXPLOIT

CVE-2018-9995 - DVR Authentication Bypass This repository addresses the security vulnerability identified as CVE-2018-9995, affecting various DVR devices, including TBK DVR4104, DVR4216, Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login. These device...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a password. The...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Omisión de Autenticación y RCE mediante usuario nulo CVE-2026-19900 Credenciales fijas y omisión de autenticación RCE mediante usuario nulo. Omisión mediante cabecera: Cookie:user=null Uso Compila y ejecuta el script con un host objetivo: go build cve-2026-19900-PoC.g...

TBK DVR4104/DVR4216 Devices - Authentication Bypass

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html logo.gif will get deleted...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Aviso de seguridad: División de respuesta HTTP mediante valores de cabecera de respuesta no validados rouille ID de CVE asignado: CVE-2026-66746 Resumen rouille escribe los valores de las cabeceras de respuesta al cliente sin comprobar si contienen retorno de carro o salto de línea. Una aplicació...

CVE-2026-86250

A flaw was found in h3. This vulnerability allows a remote attacker to send a specially crafted cookie header with an excessively large chunk count. This action triggers an inefficient cleanup process within the setChunkedCookie and deleteChunkedCookie functions, consuming significant server...

CVE-2026-82209

A flaw was found in libcurl when libpsl support is enabled. A remote attacker could exploit this vulnerability by setting a Set-Cookie header with a Domain attribute that explicitly matches a public suffix. This improper handling causes libcurl to save the cookie with a wildcard domain scope,...

CVE-2026-92790

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...

EUVD-2026-81053

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...

CVE-2026-92790 Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...