Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Author: Letda Kes dr. Sobri, S.Kom. A penetration testing tool for bypassing HTTP 401/403 responses using various header manipulation techniques and path fuzzing. Features Tests various header manipulations X-Forwarded-For, X-Original-URL, X-Rewrite-URL, etc. Unicode pa...

h2csmuggler

h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

LolLMS <= 2.2.0 - Unauthenticated File Upload

A vulnerability in parisneo/lollms up to and including version 2.2.0 allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. The endpoint lacks the Dependsgetcurrentactiveuser dependency used by other file-related APIs. id: CVE-2026-0558 info: name:...

Symfony HttpFoundation - Access Control Bypass via PATH_INFO

Symfony HttpFoundation component = 2.0.0 and prior to versions 5.4.50, 6.4.29, and 7.3.7 contains an access control bypass vulnerability. The Request class improperly interprets some PATHINFO values, producing URL paths without a leading /. This allows bypassing access control rules that are buil...

io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte

A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...

USN-8952-2: Tornado regression

USN-8952-1 fixed vulnerabilities in Tornado. Unfortunately that update was incomplete due to an incomplete fix for CVE-2026-103263, which broke static file serving for applications that subclass Tornado's StaticFileHandler, such as Jupyter, and could introduce a regression. This update fixes the...

USN-8952-2 python-tornado regression

USN-8952-1 fixed vulnerabilities in Tornado. Unfortunately that update was incomplete due to an incomplete fix for CVE-2026-103263, which broke static file serving for applications that subclass Tornado's StaticFileHandler, such as Jupyter, and could introduce a regression. This update fixes the...

io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte

A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...

io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte

A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...

Forbidden-Buster

Forbidden Buster is a tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk. Features Probes HTTP 401 and 403...

CVE-2026-121823

A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and access protected resources...

CVE-2026-121823

A vulnerability exists in armeria versions prior to 1.43.0 due to inconsistent request path normalization . This flaw allows unauthenticated attackers to bypass path-based access controls to reach protected resources . No specific exploitation details or remediation steps are provided in the docu...

CVE-2026-113368

A flaw was found in Sonatype Nexus Repository. This vulnerability allows an authenticated attacker with privileges to add or edit group repositories to bypass access controls, leading to information disclosure. Because the application does not verify whether an account is authorized to access an...

CVE-2026-116566

A flaw was found in Python. An attacker could bypass security controls and redirect network connections to unintended destinations due to improper input handling in the socket.getaddrinfo function. Specifically, when host or port parameters contain null byte characters, the values are silently...

CVE-2026-108500

A flaw was found in Apache ActiveMQ when configured to use the LDAP authorization plugin LDAPAuthorizationMapPlugin. An authenticated attacker can bypass access control restrictions by creating or addressing a destination with a specially crafted name containing Lightweight Directory Access...

CVE-2026-118654

A flaw was found in Echo. This vulnerability allows an unauthenticated remote attacker to bypass access controls and view protected files. When requests containing dot segments are sent to public static file handlers, the application normalizes the path after route matching has occurred, enabling...

CVE-2026-118651

A flaw was found in Echo. When the proxy middleware is used without an explicit IP extractor configured, it retains and forwards attacker-supplied X-Real-IP headers to upstream services. A remote attacker can exploit this vulnerability to spoof their client Internet Protocol IP address. This flaw...

CVE-2026-109856

A flaw was found in Apache OFBiz. An authenticated user with low-level privileges can bypass access controls by sending direct requests to restricted financial account services. This vulnerability allows an attacker to escalate privileges and create, modify, or cancel financial account balances a...

CVE-2026-18661

A flaw was found in Eclipse Jetty. This vulnerability allows a remote, unauthenticated attacker to bypass access controls, leading to unauthorized information disclosure and potential data modification. When an application combines servlet security annotations with deployment descriptor...