theftfuzzer

┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduction: TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. Usage: python theftfuzzer.py -d 'http://example.com/api/data' Help: python...

CVE-2025-4664

🔒 Vulnerability CVE-2025-4664 The CVE-2025-4664 vulnerability is a high-severity security flaw identified in the Loader component of Google Chrome, present in versions prior to 136.0.7103.113. This issue allows a remote attacker to leak cross-origin data via a specially crafted HTML page,...

cve-2020-16012

This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. Read a writeup of this vulnerability on the Mozilla Attack & Defense blog. Inside benchmark is code for measuring the timing of the...

CVE-2023-45857-Demo

Demo to verify the behavior of axios vulnerability CVE-2023-45857 1. Start with dev container 2. Run npm run dev on the app container 3. Access http://app.localhost 4. Verify that XSRF-TOKEN is set in the Cookie using the browser's developer tools The value is CREDENTIALTOKEN HttpOnly is false...

afterimage

Afterimage Created and maintained bySergio Rodriguez SSH-PuR66. The experiment harnesses and analysis are mine; the published vulnerabilities, urllib3 code, and upstream fixes retain their original attribution. Author’s research method · Redirect harness · Chunk-framing study Read the patch...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

CVE-2026-115750

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...

CVE-2026-115750

The mcp-from-openapi library (versions 2.5.0 before 2.9.0 ) is vulnerable to a credential exposure flaw. The root cause is that the safeFetch() function forwards Authorization and Cookie headers during cross-origin redirects. An attacker controlling a specification host or exploiting an open redi...

CVE-2026-115750 mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...

EUVD-2026-108958

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...

CVE-2023-43804

CVE-2023-43804: urllib3 Cookie Leak Reproduction & Remediation Lab The repository includes a fully containerized, three-tier lab environment which is intended for demonstrating, taking advantage of, and verifying the fixes for CVE-2023-43804 the urllib3 Cookie Leak occurring during cross-origin...

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...

CVE-2026-107858

Missing Origin Validation in WebSockets CWE-1385 and Permissive Cross-domain Policy with Untrusted Domains CWE-942 in the development web server ADK Web in Google Agent Development Kit ADK for Java com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plug...

CVE-2026-107858

Missing Origin Validation in WebSockets CWE-1385 and Permissive Cross-domain Policy with Untrusted Domains CWE-942 in the development web server ADK Web in Google Agent Development Kit ADK for Java com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plug...

follow-redirects: follow-redirects: Information disclosure via improper regular expression escaping in sensitive header filtering

A flaw was found in follow-redirects. This vulnerability allows an untrusted remote server to receive sensitive credential headers due to improper handling of cross-origin redirects. When an application specifies sensitive headers containing special regular expression characters, the library fail...

follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects

A flaw was found in follow-redirects. When an application provides request headers in an array format, the library fails to remove sensitive credential headers before following a redirect to another host or an insecure protocol. A remote, untrusted server can exploit this flaw by issuing a redire...

follow-redirects: follow-redirects: Information disclosure via improper regular expression escaping in sensitive header filtering

A flaw was found in follow-redirects. This vulnerability allows an untrusted remote server to receive sensitive credential headers due to improper handling of cross-origin redirects. When an application specifies sensitive headers containing special regular expression characters, the library fail...

follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects

A flaw was found in follow-redirects. When an application provides request headers in an array format, the library fails to remove sensitive credential headers before following a redirect to another host or an insecure protocol. A remote, untrusted server can exploit this flaw by issuing a redire...

follow-redirects: follow-redirects: Information disclosure via improper regular expression escaping in sensitive header filtering

A flaw was found in follow-redirects. This vulnerability allows an untrusted remote server to receive sensitive credential headers due to improper handling of cross-origin redirects. When an application specifies sensitive headers containing special regular expression characters, the library fail...

follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects

A flaw was found in follow-redirects. When an application provides request headers in an array format, the library fails to remove sensitive credential headers before following a redirect to another host or an insecure protocol. A remote, untrusted server can exploit this flaw by issuing a redire...