mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-72744-poc

CVE-2026-72744: Nuxt Chrome DevTools エンドポイントの情報漏えい PoC English version 概要 このリポジトリは、Nuxt 開発サーバーの Chrome DevTools workspace エンドポイントに存在する情報漏えい脆弱性 CVE-2026-72744 の Proof of Concept PoC です。 脆弱な開発サーバーは、接続元がローカルかどうかを TCP peer address ではなく、 攻撃者が指定できる Host などの HTTP ヘッダーで判定します。開発サーバーが 0.0.0.0 に bind...

CVE-2025-29927

🔍 CVE-2025-29927 - Next.js 中间件绕过检测器 这个基于Python的智能扫描器帮助检测Next.js应用程序中的CVE-2025-29927 漏洞——一种关键的中间件绕过漏洞，允许攻击者通过精心构造的HTTP头来跳过身份验证。 🧠 该工具不仅识别HTTP重定向，还识别客户端重定向机制，例如、基于关键词的登录重定向以及静默认证绕过。 🚀 功能 ✅ 交互式输入（目标URL和路径） ✅ 智能检测： x-middleware-subrequest 绕过头 基于的重定向 包含关键字如 login、sign in、authentication 的HTML内容 ✅...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Aviso de seguridad: División de respuesta HTTP mediante valores de cabecera de respuesta no validados rouille ID de CVE asignado: CVE-2026-66746 Resumen rouille escribe los valores de las cabeceras de respuesta al cliente sin comprobar si contienen retorno de carro o salto de línea. Una aplicació...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ 扩展了 Burp Suite 的主动和被动扫描能力。它以最小的网络开销为设计目标，识别可能引起高级测试人员关注的应用行为： 潜在的 Host 头攻击（密码重置投毒、缓存投毒、DNS 重绑定） Edge Side Includes XML 输入处理 可疑的输入转换（例如 77 = '49'，\\ = ''） 仅在模糊测试期间出现的被动扫描器问题（安装 'Error Message Checks' 扩展以获得最佳效果） 它还增加了对以下问题的检查： 通过表达式语言、Ruby 的 open 和 Perl 的 open 进行的盲注代码注入...

CVE-2026-73570

CVE-2026-73570 CVE-2026-73570 PoC More echo 'EHLO mx-1787907797.invalid MAIL FROM: RCPT TO: QUIT\r\n' | nc 127.0.0.1 587...

CVE-2026-84429 Potential denial-of-service vulnerability in HTTP header parsing

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.http.parseheaderparameters was subject to a potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter. An...

CVE-2026-84429 Potential denial-of-service vulnerability in HTTP header parsing

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.http.parseheaderparameters was subject to a potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter. An...

CVE-2026-40864

CVE-2026-40864 — JupyterHub XSRF bypass via cross-origin form POST Sec-Fetch-Mode: no-cors Severity : Medium CVSS 5.4 CWE : CWE-352 — Cross-Site Request Forgery XSRF Affected : jupyterhub 4.1.0 ≤ version posting to a different origin — precisely the classic CSRF vector the token is supposed to...

Exploit for Missing Authentication for Critical Function in Gfi Kerio_Control

!WARNING DISCLAIMER This proof-of-concept is provide...

Detect_polyfill_CVE-2024-38537-

DetectpolyfillCVE-2024-38537 以下是一个 Python 脚本，用于检查给定 Web 应用的 Content Security Policy（CSP）标头中是否存在 polyfill.io 域名。 步骤： 1.将修改后的脚本（checkcspfromfile.py）与你的 urls.txt 文件放在同一目录下。 2.使用 python checkcspfromfile.py 运行脚本。 3.脚本将逐个读取 urls.txt 中的每个 URL，获取 CSP 标头，并检查每个 URL 的 CSP 标头中是否允许 polyfill.io。...

CVE-2026-33453

camel-coap 标头注入 → RCE 漏洞复现工具 CVE-2026-33453 本项目演示了 Apache Camel camel-coap 组件中的一个 Camel 消息标头注入 漏洞，编号为 CVE-2026-33453 。未认证的攻击者只需发送一个 CoAP UDP 数据包，即可向 Exchange 中注入任意 Camel 控制标头，当路由将消息转发给诸如 camel-exec 等对标头敏感的生产者时，即可实现 远程代码执行 。 安全公告：https://camel.apache.org/security/CVE-2026-33453.html 漏洞摘要 属性| 值...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2TYPESSL TLV Type-Length-Value header. This can lead to an IndexOutOfBoundsException...

BIT-APACHE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...