DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values rouille Assigned CVE ID: CVE-2026-66746 Summary rouille writes response header values to the client without checking them for carriage return or line feed. An application that places attacker-influenced text into a...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html logo.gif will get deleted...

TBK DVR4104/DVR4216 Devices - Authentication Bypass

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in AllegroSoft RomPager's HTTP cookie handling all versions 4.34. A single unauthenticated request with a crafted Cookie: header corrupts memory. Effects: admin auth bypass, DoS/reboot, and with firmware-specific offsets remote code...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: go build cve-2026-19900-PoC.go ./cve-2026-19900-PoC -t...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a password. The...

CVE-2018-5767-AC9

Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a...

CVE-2022-0155-PoC

CVE-2022-0155 Proof-of-Concept PoC This repository contains a demonstration of the CVE-2022-0155 vulnerability. The vulnerability was detected by ranjit-git and is described in detail here. The purpose of this PoC is to demonstrate that the vulnerability doesn't just apply to scenarios where...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

GHSA-CHP3-J5QR-2VFR Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()

Impact The name, domain, and path fields of makeCookie were validated with a regex that allows ;, the attribute separator in Set-Cookie headers. Because serializeCookie writes those fields verbatim, a caller who passes untrusted input into any of them can append arbitrary attributes to the header...

CVE-2026-124249

The CPython http.cookiejar.CookieJar component is vulnerable to an Origin Validation Error (CWE-346). A server could delete stored cookies belonging to other domains from a shared cookie jar—such as the one used by urllib's HTTPCookieProcessor—by sending a response with an already expired Set-Coo...

SUSE CVE-2026-120644

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

DEBIAN-CVE-2026-120644

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

CVE-2026-120644

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

CVE-2026-120631

A flaw was found in perl-cgi. A remote attacker can cause a Denial of Service DoS by sending an HTTP request with a specially crafted Cookie header containing a malformed expiration attribute. Because the cookie parser inserts this unescaped value directly into an internal regular expression a...

CVE-2026-120644

The CGI::Cookie module for Perl (versions before 5.00 ) is vulnerable to cookie attribute injection due to insufficient validation of the path, domain, and expires values. The module fails to check for semicolons or control characters before writing these values into the Set-Cookie header. If an ...