729 matches found
CVE-2026-66568
The WordPress Original theme (versions
EUVD-2026-96522
Unauthenticated PHP Object Injection in Original = 1.9.0 versions...
CVE-2025-29927
CVE-2025-29927 - Next.js Middleware Authentication Bypass Advanced Bypass 🔥 Overview An advanced PoC for CVE-2025-29927 , allowing authentication bypass in Next.js Middleware by manipulating specific headers. This template enhances WAF evasion and security bypass techniques. 🚀 Features ✅...
WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Original versions = 1.9.0...
GO-2026-6639 Anubis: Policy bypass via client controlled X-Original-URI header in github.com/TecharoHQ/anubis
Anubis: Policy bypass via client controlled X-Original-URI header in github.com/TecharoHQ/anubis...
GHSA-6WCG-MQVH-FCVG Anubis: Policy bypass via client controlled X-Original-URI header
Any HTTP client can bypass Anubis bot protection on the default configuration by adding a single request header. No challenge needs to be solved. Affected versions: v1.22.0 through v1.25.0 introduced in commit d1d631a, PR 1015 The root cause is in lib/policy/checker.go, PathChecker.Check: go func...
EUVD-2026-44819
Anubis: Policy bypass via client controlled X-Original-URI header...
Anubis: Policy bypass via client controlled X-Original-URI header
Any HTTP client can bypass Anubis bot protection on the default configuration by adding a single request header. No challenge needs to be solved. Affected versions: v1.22.0 through v1.25.0 introduced in commit d1d631a, PR 1015 The root cause is in lib/policy/checker.go, PathChecker.Check: go func...
PT-2026-104073
Name of the Vulnerable Software and Affected Versions DevKit Pro versions prior to 3.0.0 Description An authentication bypass exists in the DevKit Pro plugin for WordPress. The issue occurs because the revert switch handler trusts the original user id cookie, which is controlled by the attacker, ...
CVE-2026-59317
A flaw was found in Spring for Apache Kafka. The DeadLetterPublishingRecovererFactory component does not properly validate the retrytopic-original-timestamp header. A remote attacker can exploit this by sending a specially crafted message with a malformed header, leading to an infinite processing...
SUSE CVE-2025-64031
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...
Linux Distros Unpatched Vulnerability : CVE-2025-64031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original- filename field to archivecompressorgzipopen in...
CVE-2025-64031
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...
UBUNTU-CVE-2025-64031
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...
CVE-2025-64031
A flaw was found in libarchive, a data archiving library. This vulnerability, a heap-based buffer overflow in the gzip writer, occurs when handling the original-filename field. While exploitation requires a specific, marginally plausible scenario where an untrusted source provides the filename, a...
CVE-2025-64031
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...
CVE-2025-64031
libarchive versions 3.8.x before 3.8.2 (affecting bsdtar ) contain a strcpy heap-based buffer overflow in the gzip writer, triggered via the original-filename field passed to archive_compressor_gzip_open in archive_write_add_filter_gzip.c. The CVSS 3.1 score is 2.5 (Low) with a local attack vecto...
PT-2026-90992
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive compressor gzip open in archive write add filter gzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in...
CVE-2025-64031
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...
CVE-2025-64031: Heap-based Buffer Overflow
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...