CVE-2022-21587-Oracle-EBS-

Prerequirement for this exploit to run: python3 including module requests, os, sys, slipit uuencode Before you run, make sure to use for only on ethical duties if the exploit Fail to run: Make sure you already install the pre req module install requests pip3 install requests Install slipit, git...

HTTPoxyScan

HTTPoxy Exploit Scanner by 1N3 @CrowdShield https://crowdshield.com Last Updated: 20160720 ABOUT: PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments...

CVE-2026-49042

CVE-2026-49042 — camel-langchain4j-tools Prompt-Injection → Header-Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/|...

CVE-2026-34975

CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw MIME construction Severity : High CVSS 8.5 CWE : CWE-93 — Improper Neutralization of CRLF Sequences 'CRLF Injection' Affected : useplunk/plunk = 0.7.1 Fixed in : 0.8.0 Advisory : GHSA-2mvm-rg5v-7hfq NVD :...

CVE-2026-118372

LibreSSL ocspcheck versions through 4.4.0 are vulnerable to a CRLF injection vulnerability. The issue exists because the url2host() function copies the URI path without rejecting control characters, while http_open() subsequently includes this path in the POST request line. An attacker can exploi...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: python code.py file.php -this will scan one file...

cakephp-smtp-crlf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-smtp-crlf cakephp-smtp-crlf Class: Mail header injection Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation GHSA-2qh5 / CVE-2026-77634 added strreplace"\r\n", '', $val on SmtpTransport and...

CVE-2026-85249

CVE-2026-85249 — camel-tika: metadata header injection document sets CamelFileName Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Tika producer mapped every metadata key parsed out of the submitted document onto the Exchange as a header, with no filter applied...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...

crlf-powered-desync-scanner

CRLF-Powered Desync Scanner This is the Burp Extension we used to detect all cases from our research CRLF-Powered Desync Attacks: Beheading HTTP Streams. It's a research-first scanner built using BulkScan similar to HTTP Request Smuggler and others. Implementation Request Header Injection probe...

NextJS_CVE-2025-29927

Next.js Authorization Bypass Demo This application demonstrates the x-middleware-subrequest vulnerability in Next.js 13.4.19, which allows bypassing middleware protection. Setup 1. Install dependencies: npm install 2. Start the development server: npm run dev Vulnerability Demonstration The...

CVE-2025-29927

CVE-2025-29927 Introduction This document presents a study of the vulnerability CVE-2025-29927 , affecting the Middleware mechanism in the Next.js framework. Next.js is a popular open-source framework from Vercel for building React-based applications. It supports server-side rendering, static...

CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

🎯 CTT-Mailpit-Exploit: Perfect 11/10 Score Zero-Click Worm Transform a basic SMTP header injection CVE-2026-23829 into a perfect-scoring, self-propagating RCE worm using Convergent Time Theory. 📊 Score Transformation: 6.1 → 11.0/10 ⭐ Metric Original CVE-2026-23829 CTT-Enhanced Improvement CVSS...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC Minimal example to reproduce CVE-2022-22963 remote code execution in org.springframework.cloud:spring-cloud-function-core. Exploit Run the server mvn spring-boot:run Make a request curl -X POST -H 'spring.cloud.function.routing-expression:...

CVE-2026-31908

CVE-2026-31908 - Apache APISIX Header Injection Exploit 📋 Overview This is a Proof of Concept PoC exploit for CVE-2026-31908 , a critical header injection vulnerability discovered in Apache APISIX versions 2.12.0 through 3.15.0. The vulnerability exists in the forward-auth plugin, where improper...

CPanel-Audit-Remediation-Tool

🛡️ Oscar Constanzo Audit & Patch Tool CVE-2026-41940 Professional Security Auditing & Incident Response Suite for cPanel Infrastructure. 📖 Description This tool was developed by Oscar Constanzo Quezada, AKA Underhost to identify and remediate the CVE-2026-41940 vulnerability in cPanel servers. The...

CVE-2026-Mastodon-Streaming-CRLF-Injection

CVE-2026-XXXXX: HTTP Response Header Injection CRLF in Mastodon Streaming Server Vulnerability Overview Item| Details ---|--- CVE ID| CVE-2026-XXXXX Affected Product| Mastodon Streaming Server Affected Version| $key: $headerskey.join' ' ; Impact HTTP Header Injection: Inject ar...

CVE-2026-63621

CVE-2026-63621 — camel-knative structured CloudEvent header injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Style ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-knative 4.18.2|...

Next.Js-middleware-bypass-vulnerability-CVE-2025-29927

A basic proof of concept of the CVE-2025-29927 vulnerability that allows to bypass the middleware scripts. Details: Read Here This uses Next.js version 15.2.2. The vulnerability allows the user to bypass the middleware script which contains the verification and can access the admin page without...

CVE-2026-85314

CVE-2026-85314 — camel-mail: MimeMultipart header injection mail.smtp Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-mail MimeMultipart data format mapped a message's headers onto the Exchange on unmarshal using a plain DefaultHeaderFilterStrategy, which...