Security update for helm

This update for helm fixes the following issues: CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal...

httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

cve-2025-29927-lab

Laboratorio CVE-2025-29927 Laboratorio de reproducción mínima para CVE-2025-29927 — Bypass de autorización de middleware de Next.js CVSS 9.1. Acompañante de: Análisis de N-Day en Medium Qué es esto Una aplicación Next.js 15.2.2 vulnerable con una ruta /dashboard protegida por cookie. La...

CVE-2026-67182-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille-

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass rouille Assigned CVE ID: CVE-2026-67182 Summary rouille::proxy::proxy and rouille::proxy::fullproxy copy client-supplied request header values into the upstream connection without checking them for control character...

CVE-2026-63574 Unbounded allocation from OpenPGP signature and user attribute subpacket lengths

Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers SignatureSubpacketsParser.ReadPacket, UserAttributeSubpacketsParser.ReadPacket in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote, unauthenticated attacker who can...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – SMTP Header Injection in Contact Form Program Code Python contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender = request.form'email' message =...

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

optionsbleed

optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: snallygaster -t optionsbleed host usage optionsbleed -h -n N -a -u hosttocheck Check for the...

CVE-2023-6553

CVE-2023-6553 PHP File Inclusion Leading to RCE — Backup Migration Plugin Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Critical CWE: CWE-98 — Improper Control of Filename for Include/Require Statement Authentication Requirement: None Impact: Remote Code Execution 1. What is this...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability Assessment Tool Safely detect whether a FortiClient EMS server is vulnerable to CVE-2026-35616 without causing any disruption. See the full write-up on the Bishop Fox blog. Description CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5 and 7.4....

wwwgrep

WWWGrep Repositorio Web de la Fundación OWASP Autor: Mark Deen & Aditi Mohan Introducción WWWGrep es un mecanismo rápido de búsqueda "grepping" que examina elementos HTML por tipo y permite realizar búsquedas enfocadas única URL, múltiples URLs basadas en archivo y recursivas con respecto al...

CVE-2026-21003-JWT-none-Algorithm-Bypass-via-kid-Header-Omission

CVE-2026-21003 – JWT "none" Algorithm Bypass via kid Header Omission Program Code Node.js // jwtverifyserver.js - Vulnerable JWT verification const jwt = require'jsonwebtoken'; const express = require'express'; const app = express; app.useexpress.json; const publicKey = -----BEGIN PUBLIC KEY-----...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introducción: Apache Struts 2 es un framework de aplicaciones web de código abierto para desarrollar aplicaciones Java EE. Es la segunda generación del framework Struts, lanzado por primera vez el 10 de octubre de 2006. El framework Struts está diseñado para ayudar a...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2017-7529-

CVE-2017-7529-Desbordamiento de Entero en el Encabezado Range de Nginx Nginx es un servidor web de alto rendimiento y un servidor proxy inverso, de caché, etc., ampliamente utilizado. En versiones de Nginx 1.13.2 e inferiores, existe una vulnerabilidad de desbordamiento de enteros que permite a u...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

CVE-2025-6783

Inyecta una condición siempre verdadera en la cláusula WHERE para que todas las filas coincidan: curl -i -X POST \ -H "Content-Type: application/json" \ -H "forms-id: poc-001' OR '1'='1' -- " \ -H "domain-id: example.com" \ -d ' "emabedtype":"iframe", "shortcodetitle":"INJECTED",...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

BypassFuzzer

Bypass Fuzzer El original 403fuzzer.py : ==Nota: Esto ha quedado obsoleto por mi nueva y brillante extensión de Burp que es 1000000% mejor. ¡Gracias por usar mis herramientas!== Puedes encontrar la extensión aquí: https://github.com/intrudir/BypassFuzzer-Burp Fuzzear endpoints 401/403 para bypass...