CVE-2026-80343

CVE-2026-80343 — camel-netty-http: security-constraint case-sensitivity bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-netty-http security constraint compared the request path against the configured context path using a case-sensitive match, while t...

CVE-2026-9086-poc

CVE-2026-9086: Keycloak URI Scheme Validation Bypass XSS PoC 日本語版 Overview This repository contains a Proof of Concept PoC for CVE-2026-9086 , a Cross-Site Scripting XSS vulnerability in Keycloak client URI validation. Vulnerable Keycloak versions compared the prohibited javascript: and data:...

running-CVE-2024-32002-locally-for-tesing

We are adapting this for local use we follow this blog post but with some key differences https://amalmurali.me/posts/git-rce How It Works 1. A malicious repository gitrce includes a submodule with a specially crafted path. 2. The submodule path uses a case variation that exploits the...

CVE-2026-89012

CVE-2026-89012 — Dolibarr SQL Filter Denylist Bypass Exploit for CVE-2026-89012: the forbidden-fields denylist in forgeSQLFromUniversalSearchCriteria introduced with the CVE-2026-71510 fix uses a case-sensitive inarray while the operand charset allows A-Z. Since SQL column resolution is...

monstra_cms-3.0.4--getshell

monstracms-3.0.4--getshell monstracms-3.0.4-upload getshell CVE-2018-17418 Code analysis: In line 150 of monstra\plugins\box\filesmanager\filesmanager.admin.php, there is a forbiddentypes variable used as a blacklist restriction. Continue to follow this variable. In the line 150 of...

CVE-2026-116469

MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions checkrequiredtaxonomyexists, checkrequiredtaxonomytagsallowed, checkblockedattributecategories, and checkblockedanalystdatasharinggroupsuuids...

CVE-2026-116469

The MISP Guard security filter contains a case-sensitivity flaw in several policy enforcement functions, including check_required_taxonomy_exists, check_required_taxonomy_tags_allowed, check_blocked_attribute_categories, and check_blocked_analyst_data_sharing_groups_uuids. Because these functions...

CVE-2026-116469

MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions checkrequiredtaxonomyexists, checkrequiredtaxonomytagsallowed, checkblockedattributecategories, and checkblockedanalystdatasharinggroupsuuids...

EUVD-2026-109736

MISP Guard, a proxy-based security filter for MISP Malware Information Sharing Platform feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions checkrequiredtaxonomyexists, checkrequiredtaxonomytagsallowed, checkblockedattributecategories, and...

CVE-2026-116469 MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding

MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions checkrequiredtaxonomyexists, checkrequiredtaxonomytagsallowed, checkblockedattributecategories, and checkblockedanalystdatasharinggroupsuuids...

CVE-2026-116469 MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding

MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions checkrequiredtaxonomyexists, checkrequiredtaxonomytagsallowed, checkblockedattributecategories, and checkblockedanalystdatasharinggroupsuuids...

PT-2026-123278

MISP Guard, a proxy-based security filter for MISP Malware Information Sharing Platform feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions check required taxonomy exists, check required taxonomy tags allowed, check blocked attribute categories...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the enhanceHeaderFilterStrategyToSkipHttpRequestHeaders function in the Platform HTTP component. An attacker can cause caller-supplied values in common request headers that the filter is meant t...

Improper Handling of Case Sensitivity

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the extractTarget function in the HttpServerChannelHandler...

CVE-2026-85254

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively, whi...

CVE-2026-80343

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

EUVD-2026-104194

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively, whi...

CVE-2026-85254

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively, whi...

EUVD-2026-104214

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

CVE-2026-80343

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...