CVE-2026-75753

Certain ASUS routers are affected by a Missing Authentication for a Critical Function vulnerability. This flaw allows an unauthorized nearby user to send specific commands via HTTP requests , which can cause the router to reveal device identification information and switch into a specific mode. C...

CVE-2026-17518

Certain ASUS router models are vulnerable to a buffer copy without checking the size of input . This flaw allows an adjacent authenticated user to send an HTTP request with input exceeding the expected length, potentially leading to corrupted device operations or a denial of service (DoS) . Remed...

CVE-2026-105299

Versions of pingora-proxy before 0.9.0 are vulnerable to an ACL bypass because the HTTP/1 upstream path fails to remove client-nominated Connection headers and associated hop-by-hop headers, violating RFC 9110. An attacker can nominate a header that the application subsequently adds in upstream_r...

CVE-2026-105298

Versions of Pingora prior to 0.9.0 are vulnerable to a security issue where the software accepts HTTP/2 requests with a Host header that differs from the :authority pseudo-header. The root cause involves the server failing to compare these values or reject userinfo in the authority, violating RFC...

CVE-2026-105298 Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...

CVE-2026-105297 Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits

Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size and no limit on concurrent streams. A remote, unauthenticated client can send 1-byte HPACK references to a near-empty header, making the serv...

CVE-2026-105297

The Pingora HTTP/2 server is vulnerable to a remote, unauthenticated denial of service (DoS) due to memory exhaustion. Before version 0.8.1 , the server used default limits that allowed a client to send 1-byte HPACK references to near-empty headers, forcing the server to allocate hundreds of thou...

EUVD-2026-104673

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery SSRF that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during...

CVE-2026-8355

IBM ContextForge MCP Gateway versions 0.1.0 through 1.0.5 are vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) during OAuth-enabled gateway registration. The application fails to validate the oauth_config.token_url parameter when using client_credentials authentication, allowing authe...

CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x. Note: versions mentioned in the descriptio...

agent-vault

HTTP credential proxy and vault An open-source credential broker by Infisical that sits between your agents and the APIs they call. Agents should not possess credentials. Agent Vault eliminates credential exfiltration risk with brokered access. New here? Thelaunch blog post has the full story...

PacketSender

Introduction https://packetsender.com Read this in other languages:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline...

CVE-2024-40898

CVE-2024-40898 This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request. It...

httpfuzz-robomiller

httpfuzz-robomiller Dumb Fuzzer used to find CVE-2010-1411 based on cmiller-csw-2010.pdf Babysitting an Army of Monkeys https://fuzzinginfo.files.wordpress.com/2012/05/cmiller-csw-2010.pdf...

ModSecurity

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 batch scanning and exploitation script. PHPUnit is a PHP-based testing framework. There is a security vulnerability in the Util/PHP/eval-stdin.php file in PHPUnit versions prior to 4.8.28 and 5.x versions prior to 5.6.3. Remote attackers can exploit this vulnerability ...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

CVE-2026-77262

CVE-2026-77262 — Arbitrary File Read in mcp-atlassian via confluenceuploadattachment Severity : High CVSS 8.6 CWE : CWE-22 — Path Traversal Affected : sooperset/mcp-atlassian 0.22.0 Fixed in : 0.22.0 Advisory : GHSA-p6hp-93wp-fh6p NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-77262 Credit :...

EXPLOIT-CVE-2026-42559

CVE-2026-42559 — DNS rebinding in the rmcp Streamable HTTP server transport A self-contained Docker lab and Python proof of concept for CVE-2026-42559 GHSA-89vp-x53w-74fx / RUSTSEC-2026-0189. | ---|--- Affected| rmcp — the official Rust SDK for the Model Context Protocol — 1.4.0 Fixed in| 1.4.0...