CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – DKIM Signature Verification Bypass Header Canonicalization Flaw Program Code Python email parsing simulation dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From: [email protected] To: [email protected]...

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

CVE-2021-41773

CVE-2021-41773 PoC — Apache HTTP Server Path Traversal Overview CVE-2021-41773 is a path traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability allows an attacker to access files outside the intended directory under specific configurations, particularly when directories ar...

XSW

XML Signature Wrapping XSW Burp Suite Extension XSW Burp Suite Extension automates the process of probing SAML endpoints for Signature Wrapping vulnerabilities. How to 1. Right-click on Authentication request at Burp Suite and choose "WRAP Attack". 2. Configure the dialog parameters and start the...

EUVD-2026-125164

Fleet before 4.86.2 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory through quadratic XML canonicalization of unsigned SAML responses. Attackers can send a single crafted SAML response with deeply nested elements declaring new namespace...

CVE-2026-126401

Versions of Fleet prior to 4.86.2 are vulnerable to an unauthenticated Denial of Service (DoS) attack. The root cause is quadratic XML canonicalization of unsigned SAML responses. An attacker can crash the Fleet server by sending a single crafted SAML response containing deeply nested elements wi...

CVE-2026-126401 Fleet before 4.86.2 Unauthenticated DoS via SSO Callback XML Canonicalization

Fleet before 4.86.2 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory through quadratic XML canonicalization of unsigned SAML responses. Attackers can send a single crafted SAML response with deeply nested elements declaring new namespace...

CVE-2026-126473 OpenEMR before 8.4.0 OAuth Authorization Bypass via Scope Canonicalization

OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.writ...

CVE-2026-126473 OpenEMR before 8.4.0 OAuth Authorization Bypass via Scope Canonicalization

OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.writ...

EUVD-2026-124951

OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.writ...

CVE-2026-126473

OpenEMR versions prior to 8.4.0 are vulnerable to an OAuth authorization bypass caused by scope canonicalization and containment flaws. This allows unauthenticated attackers to bypass approval processes by registering a colon-form client (e.g., system:Patient.read). Once registered, attackers can...

CVE-2026-8452-check

Citrix NetScaler SAML PrefixList Heap Overflow — Patch-State Detection Script A safe, non-destructive patch-state check for CVE-2026-8452 , the pre-authentication heap overflow in the Citrix NetScaler ADC / NetScaler Gateway SAML signature canonicalizer CTX696604, CVSS 8.8. An oversized...

CVE-2026-102479

A flaw was found in Eclipse Vert.x. The HTTP/1.x decoder improperly canonicalizes standard HTTP header names, causing malformed headers such as Content-Xength to be misinterpreted as Content-Length. A remote attacker can exploit this flaw by sending crafted HTTP requests to perform HTTP request...

[SECURITY] Fedora 45 Update: rust-reqsign-aws-core-3.2.0-1.fc45

Shared AWS credential and request canonicalization support for reqsign...

fast-uri: fast-uri: Security policy bypass via improper host canonicalization

A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially...

fast-uri: fast-uri: Security policy bypass via improper host canonicalization

A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially...

fast-uri: fast-uri: Security policy bypass via improper host canonicalization

A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially...

fast-uri: fast-uri: Security policy bypass via improper host canonicalization

A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially...

Fast-uri Vulnerable To Host Confusion Via Unchecked WHATWG Host Canonicalization

Impact "fast-uri" versions "= 2.4.2, = 3.1.3, = 4.0.1, = 4.2.2" can silently rewrite the host of an HTTP-family URL "http", "https", "ws", "wss", or any scheme with "domainHost: true". For those schemes "canonicalizeHost" passes the parsed host to the WHATWG "URL" parser and adopts its ".hostname...

npm: fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

npm: fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization vulnerability discovered by ? in WordPress npm fast-uri versions = 2.4.2, 2.4.8...