CVE-2026-86413

When using an ambient user in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there...

CVE-2026-86413 Negotiate credentials sent to redirected origin

When using an ambient user in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there...

CVE-2026-86413

The curl utility contains a flaw where it may leak sensitive Negotiate authentication credentials (specifically system-provided Kerberos credentials) to an unrelated second origin. This occurs when using an ambient user during a first transfer and the client is configured to follow HTTP redirects...

CVE-2026-86413

When using an ambient user in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there...

CVE-2026-86413

When using an ambient user in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there...

CVE-2026-63563

CVE-2026-63563 - Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers Vendor advisory: Sharp Product Security Advisory 2026-004 published July 31, 2026 Summary Sharp MX/BP series multifunction printers expose the address book through the device web interface without...

CVE-2026-97406

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials...

CVE-2023-7231

CVE-2023-7231 – Critical SSRF → Memcached/Docker RCE Chain via Audible fetchResource 🔥 Summary This vulnerability enables Server-Side Request Forgery SSRF in Audible’s fetchResource API on .audible.com, allowing unauthenticated attackers to pivot into internal infrastructure. Through SSRF payload...

postEX

PostEX - Post-Exploitation Recon Agent For authorized security testing only. Unauthorized use is illegal. PostEX is a Python-based post-exploitation reconnaissance agent for Windows. It collects system information, privilege status, installed patches, defense mechanisms, network configuration,...

CVE-2026-97406 Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials...

EUVD-2026-105251

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials...

CVE-2026-97406

The Xerj Console API , an open-source search and indexing engine, contains an authentication bypass vulnerability (CVE-2026-97406 ). The root cause is an architectural flaw where the system fails to distinguish between standard browser sessions and API bearer tokens, converting both into a generi...

CVE-2026-111756 follow-redirects array-form headers bypass cross-origin credential stripping

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before followi...

EUVD-2026-105225

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before followi...

CVE-2026-111756

The follow-redirects Node.js library (versions 1.16.0 to before 1.16.1 ) contains an unauthenticated confidentiality vulnerability where sensitive credential headers are leaked during cross-origin redirects. The root cause is a logic flaw in the removeMatchingHeaders function; while it correctly ...

GHSA-Q3JH-WRC6-JGQ8 follow-redirects array-form headers bypass cross-origin credential stripping

Summary follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's header...

follow-redirects array-form headers bypass cross-origin credential stripping

Summary follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's header...

NPM: follow-redirects array-form headers bypass cross-origin credential stripping

NPM: follow-redirects array-form headers bypass cross-origin credential stripping vulnerability discovered by ? in WordPress Npm follow-redirects versions = 1.16.0, 1.16.1...

follow-redirects sensitiveHeaders regex escaping can expose credential headers

Summary follow-redirects 1.16.0 introduced the sensitiveHeaders option the fix for CVE-2026-40895 / GHSA-r4q5-vmmm-2653, which lets an application declare extra header names that must be removed when a redirect crosses to a different host or downgrades protocol. The filter is a single...

GHSA-8R9P-F939-6H3C follow-redirects sensitiveHeaders regex escaping can expose credential headers

Summary follow-redirects 1.16.0 introduced the sensitiveHeaders option the fix for CVE-2026-40895 / GHSA-r4q5-vmmm-2653, which lets an application declare extra header names that must be removed when a redirect crosses to a different host or downgrades protocol. The filter is a single...