CVE-2026-105396 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...

CVE-2026-105396

The Heym library (versions before v0.0.112 ) is vulnerable to a token leakage flaw within the build_public_base_url() function. An unauthenticated attacker can spoof Origin or X-Forwarded-Host headers to redirect HITL (Human-in-the-Loop) review links to an attacker-controlled domain. By triggerin...

EUVD-2026-92414

Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...

CVE-2026-105396 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...

ReflectiveDLLInjection

Acerca de La inyección de DLL reflectante es una técnica de inyección de bibliotecas en la que se emplea el concepto de programación reflectante para realizar la carga de una biblioteca desde memoria en un proceso anfitrión. Como tal, la biblioteca es responsable de cargarse a sí misma...

starlette-host-header-lab

Lab de Confusión de URL por Host-Header en Starlette X41-2026-002 Un laboratorio de formación autónomo y contenerizado que reproduce la vulnerabilidad de omisión de autenticación en Starlette divulgada por X41 D-Sec. Aviso: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — Conflicto de...

EUVD-2026-92397

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2026-59785

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio Avanzado de PoC Este repositorio proporciona un laboratorio basado en contenedores y un PoC detallado para dos vulnerabilidades críticas de sudo: CVE-2025-32462 – Omisión de la lógica de coincidencia de host de sudo -h CVE-2025-32463 – Escape de la...

CVE-2026-103512

Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner...

CVE-2026-103512

Perforce P4 Search versions prior to 2026.4.2 are vulnerable to an authentication bypass because the system trusts a client-supplied address during the validation of specific authentication requests. An attacker possessing a stolen P4 Server ticket can exploit this flaw to bypass host-based ticke...

CVE-2026-103512 Ticket host-binding bypass via spoofed client IP in P4Search

Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner...

CVE-2026-103512 Ticket host-binding bypass via spoofed client IP in P4Search

Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner...

Mini_httpd-CVE-2018-18778

minihttpd Vulnerabilidad de lectura de archivos arbitrarios CVE-2018-18778 Minihttpd es un servidor HTTP en miniatura que puede mantener un cierto nivel de rendimiento aproximadamente el 90% de Apache mientras ocupa pocos recursos del sistema, por lo que es ampliamente utilizado como servidor...

Malicious code in with-cte (npm)

[email protected] contains no functional code: its only behaviour is a preinstall script that runs node index.js on npm install. index.js collects the install directory, the user's home directory, hostname, username and DNS servers, and the full contents of /etc/passwd and /etc/hosts, then sends the...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 Vulnerabilidad de Inyección de Cabecera Host en SISQUALWFM Este repositorio contiene información relacionada con una vulnerabilidad de inyección de cabecera Host descubierta en SISQUALWFM versión 7.1.319.103, que permite a un atacante manipular enlaces de páginas web o redirigir a...

netview

= netview Netview es una herramienta de enumeración. Usa con -d el dominio actual o un dominio especificado con -d dominio para enumerar hosts. También puedes usar -f si deseas especificar un archivo con una lista de hosts en su lugar. Cualquier nombre de host que desees excluir puede especificar...

CVE-2011-3192

CVE-2011-3192 Ejecútalo usando Python 3.7 o 3.10 probado en ellos 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks ejemplo python3 exploit.py https://example.com 50...

Malicious code in css-hgwctv-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1103a16c6f933686f07e8ce94068057f49e5cf2f0a6a9ccf01f2baeb7cfe95 On require, thunderboltRegistry.js runs an immediately-invoked function that uses childprocess.execSync to collect host identity and network...

MAL-2026-17552 Malicious code in css-hgwctv-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1103a16c6f933686f07e8ce94068057f49e5cf2f0a6a9ccf01f2baeb7cfe95 On require, thunderboltRegistry.js runs an immediately-invoked function that uses childprocess.execSync to collect host identity and network...