CVE-2026-34835-Black-box-Analysis

Этот репозиторий предоставляет анализ безопасности методом чёрного ящика уязвимости CVE-2026-34835 с точки зрения внешнего пентестера. Цель состоит не в обратной разработке уязвимости, а в документировании того, как специалист по безопасности может выявить, подтвердить и оценить её влияние в ходе...

CVE-2025-12720

g-FFL Cockpit 'POST', 36: 'callback' = CLASS, 'handleenqueueonly', 37: 'permissioncallback' = fn = self::fflcockpitisallowedself::$fflckey, 38: ;...

CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777457441)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777457441 advisory. - An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Практическая лаборатория эксплуатации для Apache Camel 🔍 Обзор CVE-2025-27636 — это критическая уязвимость удаленного выполнения кода RCE в Apache Camel , а именно в компоненте camel-exec. Она возникает из-за тонкой, но опасной проблемы: DefaultHeaderFilterStrategy выполняет...

CVE-2024-10410

Исходный код Online Hotel Reservation System на PHP/MySQLi с исходным кодом | SourceCodester Описание В Online Hotel Reservation System была обнаружена уязвимость высокой степени риска, затрагивающая функцию загрузки файла /marimar/admin/modroom/controller.php. Операция обхода проверки параметра...

claude-create-CVE-2025-29927

Testeur de vulnérabilité du middleware Next.js CVE-2025-29927 Cette application illustre la vulnérabilité de contournement d'autorisation du middleware Next.js CVE-2025-29927. À propos de la vulnérabilité CVE-2025-29927 est une vulnérabilité de contournement d'autorisation dans le middleware...

CVE-2026-85547

CVE-2026-85547 is a cross-site request forgery (CSRF) vulnerability in MISP (Malware Information Sharing Platform). The root cause is that MISP's _isRest() check disables form-security and CSRF protections when a request is identified as REST, but this detection can be manipulated by an attacker-...

UBUNTU-CVE-2026-34959

Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $SERVER"REQUESTURI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect header...

Signature Bypass

Apache CXF is vulnerable to signature Bypass. The vulnerability is due to insufficient verification of metadata signatures, where the JwsJsonContainerRequestFilter processes metadata without confirming it was authenticated by the accepted signature, and attackers can supply unauthenticated...

EUVD-2026-55228

A cross-site request forgery CSRF vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator...

CVE-2026-72578

CVE-2026-72578 concerns FreePBX Framework 17.0. The vulnerability is a CSRF weakness in the /admin/ajax.php dispatcher (amp_conf/htdocs/admin/libraries/BMO/Ajax.class.php) where no CSRF tokens are implemented; protection relies solely on a Referer header, which can be bypassed when no Referer hea...

Updated python-starlette package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. CVE-2024-28849 Starlette vulnerable to On^2 DoS via Range header merging in starlette.responses.FileResponse. CVE-2025-62727 Security restriction bypass via malformed HTTP Host header. CVE-2026-48710...

MGASA-2026-0327 Updated python-starlette package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. CVE-2024-28849 Starlette vulnerable to On^2 DoS via Range header merging in starlette.responses.FileResponse. CVE-2025-62727 Security restriction bypass via malformed HTTP Host header. CVE-2026-48710...

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

CVE-2026-48061

Litestar prior to v2.22.0 is affected by CVE-2026-48061: AllowedHostsMiddleware may bypass host validation by using X-Forwarded-Host when Host is absent, enabling host-header injection (e.g., password reset links, cache keys, routing decisions). The issue occurs when no reverse proxy strips X-For...

GO-2026-5346 Caddy: FastCGI header normalization bypass in forward_auth copy_headers in github.com/caddyserver/caddy

Caddy: FastCGI header normalization bypass in forwardauth copyheaders in github.com/caddyserver/caddy...

CVE-2026-63732

9router 0.4.59 fixed in 0.4.60 contains a chain of vulnerabilities: a hardcoded default password 123456 that authenticates any fresh installation, a bypass of the LOCALONLY network gate via a spoofed Host header, and unvalidated arguments passed to childprocess.spawn when registering MCP plugins....

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues CVE-2026-22815: insufficient restrictions in header/trailer handling can cause uncapped memory usage and a denial of service bsc1261320. CVE-2026-34513: unbounded DNS cache can cause a excessive memory usage and lead to a denial of service...

CVE-2026-62312

9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to childprocess.spawn, allowing...

EUVD-2026-44814

9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to childprocess.spawn, allowing...