CVE-2025-55315-detection-playground

Here are some tests that can be performed against these services to observe different behavior on GET/POST routes between the patched and unpatched versions of Kestrel. GET against unpatched sends 200 and socket remains open printf 'GET / HTTP/1.1\r\nHost: localhost\r\nTransfer-Encoding:...

CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-

Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization rouille Assigned CVE ID: CVE-2026-67181 Summary rouille::proxy::proxy forwards the client's Transfer-Encoding header to the backend unchanged, but writes the request body that tinyhttp has already de-chunked. It nev...

CVE-2025-55315-repro

CVE-2025-55315-repro This repository contains a small ASP.NET Core console app to reproduce and exercise HTTP chunked-transfer and newline parsing behavior. More information on CVE-2025-55315. Contents Repro/Program.cs - Console app that starts a local Kestrel server and runs two TCP-based tests...

Progress-MOVEit-Transfer-2020.1-Stored-XSS-CVE-2020-28647

Progress MOVEit Transfer 2020.1 Stored XSS CVE-2020-28647 During a recent web application test engagement one of the applications in scope was a MOVEit Transfer 2020 web application. While performing the assessment a Stored Cross-Site Scripting XSS vulnerability was identified. This blog post wil...

MoveIT-CVE-2023-34362-RCE

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby move.rb ruby move.rb 192.168.86.111 + Starting. target='https://192.168.86.111'. + Retrieved initial session token...

CVE-2020-25613

POC POST / HTTP/1.1 Host: 127.0.0.1:1080 Content-Type: text/html Content-Length: 129 Connection: keep-alive Transfer-Encoding: 0xb chunked 1 A 0 POST /flag HTTP/1.1 Host: 127.0.0.1:1080 Content-Length: 180 Connection: keep-alive Content-Type: text/html URI:...

CVE-2026-55614

uhttpd is a small HTTP server. In unpatched repository snapshots, clientparseheader in client.c lowercases header names but compares the Transfer-Encoding value to chunked using case-sensitive strcmp. A mixed-case transfer-coding token is accepted without enabling r-transferchunked, despite...

CVE-2026-55614 uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching

uhttpd is a small HTTP server. In unpatched repository snapshots, clientparseheader in client.c lowercases header names but compares the Transfer-Encoding value to chunked using case-sensitive strcmp. A mixed-case transfer-coding token is accepted without enabling r-transferchunked, despite...

EUVD-2026-114562

uhttpd is a small HTTP server. In unpatched repository snapshots, clientparseheader in client.c lowercases header names but compares the Transfer-Encoding value to chunked using case-sensitive strcmp. A mixed-case transfer-coding token is accepted without enabling r-transferchunked, despite...

CVE-2026-55614 uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching

uhttpd is a small HTTP server. In unpatched repository snapshots, clientparseheader in client.c lowercases header names but compares the Transfer-Encoding value to chunked using case-sensitive strcmp. A mixed-case transfer-coding token is accepted without enabling r-transferchunked, despite...

CLEANSTART-2024-MD01325 Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1

Security vulnerability affects the go package. Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1...

server

Ulterius: Easy Remote Management Interested in sublicensing? Want to use our code in your stack or rebrand it for internal use? Reach out to us at [email protected] Ulterius is a tool that allows unfettered access to a Windows system via a remote web interface. This program allows you to sta...

CLEANSTART-2026-MR11405 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...

CVE-2025-22869 affects multiple packages. SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. See references for...

CVE-2026-119564

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,...

CVE-2026-119564 Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,...

CVE-2026-119564 Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,...

EUVD-2026-113829

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,...

CVE-2026-119564 Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,...

CLEANSTART-2026-FJ22438 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...

CVE-2025-22869 affects multiple packages. SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. See references for...

CVE-2025-51401

Exploit Title: LiveHelperChat 4. Save the changes. 5. Initiate a chat with a visitor. 6. Transfer the chat to another operator — the XSS payload executes in the receiving operator’s chat interface...