CVE-2021-21975

CVE-2021-21975 SSRF-POC - SSRF 到凭据泄露 首先配置 pd 客户端。 现在运行 ./pd deploy http-new-requests 现在替换脚本中的 pipedream http 请求示例：Randomstring.m.pipedream.net 在一个单独的终端中运行 - ./pd logs new-requests | tee -a req.txt 然后在另一个终端中运行 - python3 CVE-2021-21975.py iplist cat req.txt | grep Basic basic.txt; cat basic.txt |...

CVE-2025-40710: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Host Header Injection HHI vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use of the tunnel, together with a forged Ho...

CVE-2022-2880: Inconsistent Interpretation of HTTP Requests

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...