CVE-2020-35391

CVE-2020-35391 Tenda f3 Malformed HTTP Request Header Processing Vulnerability. Run python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan Dork Exploitation...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...

MGASA-2026-0510 Updated python-django package fixes security vulnerabilities

Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...

Updated python-django package fixes security vulnerabilities

Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...

Fedora 44 : python-django6 (2026-dbd9eb6961)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dbd9eb6961 advisory. Update Django 6 to version 6.1.2 - Fixes CVE-2026-77050 low: Potential denial-of-service vulnerability in getsupportedlanguagevariant - Fixes...

Fedora 43 : python-django5 (2026-a7b8ff851a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a7b8ff851a advisory. Update Django 5 to version 5.2.18 - Fixes CVE-2026-77050 low: Potential denial-of-service vulnerability in getsupportedlanguagevariant - Fixes...

Fedora 44 : python-django5 (2026-8a0e918188)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8a0e918188 advisory. Update Django 5 to version 5.2.18 - Fixes CVE-2026-77050 low: Potential denial-of-service vulnerability in getsupportedlanguagevariant - Fixes...

CVE-2026-18516

An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...

EUVD-2026-102873

An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...

CVE-2026-18516

The Audit Logs component of Crafty Controller is vulnerable to an output escaping flaw (CWE-116 ). A remote, unauthenticated attacker can perform stored cross-site scripting (XSS) by leveraging HTTP header injection . No specific remediation or exploit details are provided in the documents.

CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller

An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...

CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller

An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...

PT-2026-115610

Name of the Vulnerable Software and Affected Versions Crafty Controller affected versions not specified Description An output escaping issue in the Audit Logs component allows a remote, unauthenticated attacker to execute stored cross-site scripting XSS through HTTP header injection. Cross-site...

SUSE CVE-2026-110835

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token Cookie: msts= is not rejected and is written by httpproxyconnect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a prox...

CVE-2026-84731

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

CVE-2026-84731

An unauthenticated remote attacker can achieve a pre-authentication admin bypass and Remote Code Execution (RCE) in the Nutanix Prism Gateway inside AOS . The root cause is a misconfiguration in the application's authentication filters, which allows an attacker to include a crafted internal manag...

CVE-2026-110835

A flaw was found in FreeRDP. A remote, unauthenticated attacker can perform HTTP header injection by submitting a routing token containing an unvalidated line feed character to a FreeRDP proxy configured with dynamic targets and an upstream Hypertext Transfer Protocol HTTP proxy. This vulnerabili...

EUVD-2026-101718

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token Cookie: msts= is not rejected and is written by httpproxyconnect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a prox...

CVE-2026-110835

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token Cookie: msts= is not rejected and is written by httpproxyconnect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a prox...