fast-uri vulnerable to authority injection via an unvalidated port in serialize

Impact fast-uri serializes the port component of a URI without validating it. When recomposing the authority, fast-uri escapes the userinfo and host components but concatenates the port verbatim, so a port value that is not a sequence of digits can inject authority delimiters. For example,...

EUVD-2026-70280

fast-uri vulnerable to authority injection via an unvalidated port in serialize...

GHSA-QW65-CVWX-89V3 fast-uri vulnerable to authority injection via an unvalidated port in serialize

Impact fast-uri serializes the port component of a URI without validating it. When recomposing the authority, fast-uri escapes the userinfo and host components but concatenates the port verbatim, so a port value that is not a sequence of digits can inject authority delimiters. For example,...

NPM: fast-uri vulnerable to authority injection via an unvalidated port in serialize

NPM: fast-uri vulnerable to authority injection via an unvalidated port in serialize vulnerability discovered by ? in WordPress Npm fast-uri versions 2.4.6...

Hscan

Hscan-Win-Gui HScan v1.20 Инструкция по использованию 1.Системные требования: Windows NT/2000/XP 2.Описание программного обеспечения: Многопоточная проверка указанного диапазона IP указанного хоста или списка хостов. Доступны два режима: GUI и командная строка. Пункты сканирования: -name ---...

checker-CVE-2024-6387

OpenSSH Vulnerability Checker Overview This script scans a list of target IP addresses or ranges to determine if they are running vulnerable To CVE-2024-6387. Features Scans IP addresses, domain names, file paths containing IP addresses, or CIDR network ranges. Checks a specified port default: 22...

CVE-2018-9995-rs

Overview This repository contains a proof-of-concept PoC exploit implemented in Rust targeting CVE-2018-9995. The code is for research and educational purposes only. CVE Details Identifier: CVE-2018-9995 Summary: Proof-of-concept exploit demonstrating the vulnerability see public advisories for...

dirtyfrag-arm64

dirtyfrag-arm64 arm64/aarch64 port of V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Tested on Ubuntu 24.04.4 LTS with linux-aws 6.17.0-1013-aws on AWS Graviton newest available as of this writing. Full writeup with AppArmor bypass analysis, hardening notes, and detection notes:...

CVE-2026-52199

CVE-2026-52199 : Unauthenticated Remote Code Execution in UZ801 4G Router Vulnerability Summary A critical Incorrect Access Control vulnerability exists in the Generic OEM UZ801v2.1 4G LTE Router Firmware V3.4.3. The device improperly exposes an unauthenticated Android Debug Bridge ADB daemon...

POC-CVE-2020-0796

- Affected versions - Windows 10 Version 1903 for 32-bit Systems - Windows 10 Version 1903 for ARM64-based Systems - Windows 10 Version 1903 for x64-based Systems - Windows 10 Version 1909 for 32-bit Systems - Windows 10 Version 1909 for ARM64-based Systems - Windows 10 Version 1909 for...

CVE-2022-1388

Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...

CVE-2026-49994

Bluehood , a local Bluetooth activity monitor, is vulnerable to an authentication bypass in versions prior to 0.7.1 . When auth_enabled is active, only HTML page handlers enforce session validation; however, the */api/ handlers (including settings, devices, groups, and per-device endpoints like /...

CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

Remote-Buffer-overflow-CVE-2003-0172

Remote-Buffer-overflow-CVE-2003-0172 ┌──cyberdesu㉿MSI- └─$ python3 buffer.py usage: exploit.py...

CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...

milvus-auth-audit

milvus-auth-audit Milvus скрипт проверки безопасности аутентификации. Обнаруживает три дефекта аутентификации: Уязвимость| CVE| Затронутые версии| Способ обнаружения ---|---|---|--- бэкдор sourceid обходит аутентификацию| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100...

NotCVE-2026-0010

Сводка Уязвимость: Неаутентифицированное повышение локальных привилегий до SYSTEM через TCP-порт 24801 демона Barrier Вендор: debauchee проект Barrier Продукт: Barrier 2.4.0 финальный выпуск, 01.11.2021 CWE: CWE-306: Отсутствие аутентификации для критической функции Описание Служба Windows Barrie...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Исправление Исправленная версия эксплойта удалённого выполнения кода Mobile Mouse 3.6.0.4, опубликованного как EDB-51010. Уязвимость CVE: CVE-2023-31902 Затронутая версия: Mobile Mouse 3.6.0.4 Порт по умолчанию: TCP/9099 Что было исправлено Исходный эксплойт успешно...

CVE-2026-39047

CVE-2026-39047 : Framework d'exploitation du protocole RAW pour imprimantes Epson Dépôt : https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 Script PoC : poc.py Cible simulée : mockprinter.py Auteur : J4ck3LSyN Aperçu Ce framework démontre la vulnérabilité CVE-2026-39047 - un débordement de tampon ...

Internet-Scanner

Local Network Scanner A Tkinter GUI that scans a local IPv4 network ARP + nmap probing, shows devices, lets you run full port scans, and export results. Quick overview ARP scan to discover devices on the LAN. Improved nmap probes for hostname, vendor, open ports, OS guess, and latency. Full-port...