CVE-2026-103405

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters...

cve-2023-20198

cve-2023-20198 Description. 1vere$k POC on the CVE-2023-20198 based on the Blog. Also including a check on hexademical response according to the original Cisco article. The script works in the two modes: check mode which is just makes a connection for the particular URL and checks a response code...

burp-vulners-scanner

burp-vulners-scanner Description Burp Suite scanner plugin based on Vulners.com vulnerability database API Search fingerprints in http response inspired by plugin "Software Version Reporter" and check found version in vulners.com vulnerability database Experemental Check unique URLs in vulners.co...

send

@fastify/send Send is a library for streaming files from the file system as an HTTP response supporting partial responses Ranges, conditional-GET negotiation If-Match, If-Unmodified-Since, If-None-Match, If-Modified-Since, high test coverage, and granular events which may be leveraged to take...

CVE-2025-31324

CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...

haklistgen

haklistgen Turns any junk text into a usable wordlist for brute-forcing. Installation go install github.com/hakluke/haklistgen@latest Usage Examples Scrape all words out of an HTTP response to build a directory bruteforce wordlist: curl https://wikipedia.org | haklistgen Pipe a list of subdomains...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ This script is...

CVE-2026-118374 LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attackers controlling the responder or intercepting plain HTTP AIA OCSP traffic can stream endless headers or body data to...

CVE-2026-118374 LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attackers controlling the responder or intercepting plain HTTP AIA OCSP traffic can stream endless headers or body data to...

CVE-2026-118374

LibreSSL ocspcheck through version 4.4.0 is vulnerable to a memory exhaustion vulnerability (CWE-770). The flaw exists because the application fails to limit the size of HTTP responses from OCSP responders. Malicious responders or attackers intercepting plain HTTP AIA OCSP traffic can stream unbo...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values rouille Assigned CVE ID: CVE-2026-66746 Summary rouille writes response header values to the client without checking them for carriage return or line feed. An application that places attacker-influenced text into a...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

CVE-2022-37177

CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm When visiting the interview invite link that HireVue provides for an interview, you are directed to a terms page where you agree to the terms before beginning the recorded and timed interview process. This initial HTTP response...

ibm-qradar-ajp_smuggling_CVE-2022-26377_poc

CVE-2022-26377 A Proof of Concept developed by @watchTowr to exploit an AJP Smuggling vulnerability to poison the HTTP Response Queue of an IBM QRadar instance with a stored redirect. Follow the watchTowr Labs Team for our Security Research https://labs.watchtowr.com/...

BurpSuite-Asset_Discover

BurpSuite Extension - Asset Discover Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. The extension is now part of the BApp store and can be installed directly from the Burp Suite...

AZL-111179 CVE-2026-103995 affecting package python-py 1.11.0-1

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...

AZL-111182 CVE-2026-103995 affecting package python3 3.12.14-2

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...

EUVD-2026-111382

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...

sickrageWTF

Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 A small tool to create a PoC for CVE-2000-0649. Usage This script verifies if the server is vulnerable for CVE-2000-0649. Keep in mind to play with HTTP, HTTPS and different paths. In my experience, the disclosure is mostly happening when connecting over HTTP and using the defau...