46 matches found
CVE-2025-31161
CrushFTP CVE-2025-31161 エクスプロイトツール 🔓 脆弱なCrushFTPバージョンにおけるCVE-2025-31161脆弱性の高度な検出およびエクスプロイトツール。 CVE-2025-31161 は、CrushFTP Webインターフェースにおける重大な認証バイパス脆弱性です。HTTP Authorization ヘッダーを操作することで、認証されていない攻撃者が正しいパスワードを提供せずに任意の有効なユーザー名で完全なアクセスを得ることができます。 影響を受けるバージョン CrushFTP 9.3.8 CrushFTP 9.3.9 CrushFTP 9.3.10...
CVE-2025-54309
CVE-2025-54309 CrushFTP 身份认证绕过 概述 CVE-2025-54309 是 CrushFTP 中的一个身份认证绕过漏洞，允许通过操纵 AS2 头来创建未经授权的管理员用户。 技术细节 漏洞位置 文件 ：crushftp/server/ServerSessionHTTP.java 方法 ：loginCheckHeaderAuth（第 2285 行） 根本原因 ：AS2 头验证逻辑不当 漏洞代码 else if this.headerLookup.containsKey"as2-to".toUpperCase if...
CVE-2018-12633-TPLink-Auth-Bypass
CVE-2018-12633-TPLink-Auth-Bypass TP-Link TL-WR840N ファームウェアにおける認証バイパス脆弱性 CVE-2018-12633 の技術的なケーススタディと悪用分析。 脆弱性分析: TP-Link TL-WR840N 認証バイパス CVE-2018-12633 ⚠️ 免責事項: このリポジトリは教育および研究目的のみ です。ここで提供される分析は、ライフサイクル管理とパッチ適用の重要性を強調するために、レガシーファームウェアの脆弱性を示しています。あなたが所有していないデバイスへの不正な悪用は違法です。 📄 エグゼクティブサマリー...
CVE-2026-26234: Improper Neutralization of HTTP Headers for Scripting Syntax
JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, enabling cache...
EUVD-2019-16190
Malware in sbrugna...
EUVD-2017-0306
Malware in sbrugna...
EUVD-2022-2563
Malicious code in bioql PyPI...
EUVD-2023-54318
Malicious code in bioql PyPI...
CVE-2025-8129
CVE-2025-8129 affects Koa (Koa up to v3.0.0). The vulnerability lies in lib/response.js where manipulation of Referrer can trigger an open redirect. Exploitation is remote and the exploit has been disclosed publicly. Remediation per public sources is to upgrade Koa to a version that contains the ...
CVE-2025-7339 on-headers vulnerable to http response header manipulation
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2022-22831
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header...
CVE-2019-6631
On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...
CVE-2025-2950
IBM i (versions 7.3, 7.4, 7.5, and 7.6) is affected by a host header injection vulnerability due to improper neutralization of HTTP header content in IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to alter the domain/IP, potentially causing unexpected b...
PT-2025-17301 · Ibm · Ibm I +1
Name of the Vulnerable Software and Affected Versions: IBM i versions 7.3 through 7.5 Description: The issue is caused by improper neutralization of HTTP header content by IBM Navigator for i, allowing an authenticated user to manipulate the host header in HTTP requests. This can lead to changing...
CVE-2025-2833
A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch th...
CVE-2025-25198
mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controlled domain. This...
CVE-2023-28362
The redirectto method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header...
CVE-2024-12988 Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow
A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The...
K23860356: TMM vulnerability CVE-2019-6660
Security Advisory Description iRules performing HTTP header manipulation may cause a denial-of-serviceDoS when processing traffic handled by a virtual server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs.CVE-2019-6660 Impact The...