hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Summary The forge.http client stored cookies from Set-Cookie response headers in a plain object keyed by cookie name and path. A malicious server could use the cookie name proto to add properties to Object.prototype, use inherited names such as constructor to add properties to Object, and send an...

EUVD-2026-113335

Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie...

GHSA-6WVX-3R32-XMCG Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Summary The forge.http client stored cookies from Set-Cookie response headers in a plain object keyed by cookie name and path. A malicious server could use the cookie name proto to add properties to Object.prototype, use inherited names such as constructor to add properties to Object, and send an...

npm: Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

npm: Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-79WV-8RH2-9VP2 AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers

Summary AdminNeo versions 4.6.0 through at least 5.5.0 are vulnerable to cookie attribute injection via the X-Forwarded-Prefix HTTP header. An attacker who can influence this header e.g., through a reverse proxy that forwards it from clients, an attacker-controlled upstream proxy, or a...

AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers

Summary AdminNeo versions 4.6.0 through at least 5.5.0 are vulnerable to cookie attribute injection via the X-Forwarded-Prefix HTTP header. An attacker who can influence this header e.g., through a reverse proxy that forwards it from clients, an attacker-controlled upstream proxy, or a...

CVE-2026-119416

CakePHP versions through 5.4.3 are vulnerable to an improper cookie domain validation flaw in the Http Client CookieCollection component. The root cause is unanchored suffix matching , which allows malicious servers to abuse the Set-Cookie Domain attribute. Attackers controlling a host with a suf...

CVE-2026-118777

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

CVE-2026-118777

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

CVE-2026-118777 Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

CVE-2026-118777 Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

CVE-2026-118777

The Forge (or node-forge ) JavaScript library, a native implementation of Transport Layer Security, is vulnerable to Prototype Pollution in versions prior to 1.4.1 . The forge.http client incorrectly stores cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A ...

CVE-2026-118777

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

CVE-2026-118777 Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values rouille Assigned CVE ID: CVE-2026-66746 Summary rouille writes response header values to the client without checking them for carriage return or line feed. An application that places attacker-influenced text into a...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

PT-2026-132791

Name of the Vulnerable Software and Affected Versions Forge versions prior to 1.4.1 Description The forge.http client stores cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server can exploit this by using the cookie name proto to write an...

CVE-2026-118777: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the...

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden

Summary /api/filetree/authFilePublishAccess is registered with CheckAuth only and is reachable anonymously. It never sets a failure code, so its outcome is signalled entirely by the response message and by whether a Set-Cookie header is present. Those two signals differ across access tiers, which...