CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

CVE-2026-46587

Inyección de cabecera CCB en camel-couchbase — Reproducción CVE-2026-46587 Este proyecto demuestra una inyección en las cabeceras del mensaje en el componente camel-couchbase de Apache Camel, registrada como CVE-2026-46587. El componente lee varias cabeceras del Exchange para controlar su...

Log4Shell-CVE-2021-44228-Demo

Log4Shell CVE-2021-44228 演示 环境设置 客户端 任何能够使用 curl 命令行访问 HTTP 服务器的地方 使用了 log4j 的 HTTP 服务器的易受攻击应用 Amazon Linux 2 基于 x86 EC2 实例 / CentOS Azure 虚拟机 $ yum install docker -y $ systemctl enable docker $ systemctl start docker $ docker run --name vulnerable-app -p 8080:8080...

cpx_proftpd

cpxproftpd PoC de Daniel Aldana para explotación de CVE-2015-3306. Error reportado por Vadim Melihow. MÉTODO 1: uso: python cpxproftp.py ejemplo: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt luego prueba: http://127.0.0.1/pass.txt MÉTODO 2: uso: python cpxproftp.py ejemplo: python...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105648

The Ghost Node.js content management system is vulnerable to a validation issue in versions 6.0.9 through 6.65.0 . An unauthenticated user can abuse certain functionalities, such as Webmentions , to perform limited HTTP requests to hosts within the server's internal network on specific network co...

CVE-2026-105647

The Ghost Node.js content management system is vulnerable to a Server-Side Request Forgery (SSRF) issue in versions 6.54.1 through 6.65.0 . A validation issue allows an unauthenticated user to abuse specific functionalities, such as Webmentions , to perform limited HTTP requests to hosts within t...

CVE-2021-41773

CVE-2021-41773 Esta es mi primera vez intentando hacer un exploit para algo, así que sé amable 😁 Exploit Title: Apache HTTP Server 2.4.49 Path Traversal Author: 0xRar , 0xrar.net CVE: CVE-2021-41773 Version: Apache 2.4.49 Not Tested Yet Comando de ayuda: python3 exploit.py -h...

CVE-2026-20253

CVE-2026-20253 — Laboratorio de RCE sin autenticación previa en Splunk Enterprise Creación y truncado arbitrario de archivos sin autenticación a través del sidecar de PostgreSQL CVSS 9.8 · Crítico · CWE-306 · Explotado activamente CISA KEV ⚠️ Aviso legal Este repositorio está destinado...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Captura de pantalla Uso ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Nota ! los resultados se guardarán automáticamente en vuln.txt puedes añadir un directorio común en...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both Transfer-Encoding: chunked and Content-Length headers. While Netty correctly strips the conflicting Content-Length header for HTTP/1.1 messages, thi...

Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Contribuyentes 이희수@lheeeesoo Apache HTTP Server 2.4.49 contiene una vulnerabilidad en el proceso de normalización de rutas URL, ya que no bloquea adecuadamente las rutas parentales codificadas. Un atacante puede utilizar valores como .%2e para sali...

CVE-2026-105636

The project management tool Plane is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 1.4.0 . The flaw exists in the webhook delivery task within apps/api/plane/bgtasks/webhook_task.py, where requests.post() is called without setting allow_redirects=False. While the applicati...

CVE-2026-105636 Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhooktask.py calls requests.post without allowredirects=False and does not validate redirect targets. validateurl blocks private, loopback, link-local, and reserved addresses in...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 根据美国国家漏洞数据库（NVD）CVE-2021-41773，Apache HTTP Server 2.4.49 容易受到路径遍历和远程代码执行攻击。 路径遍历 路径遍历漏洞是由于为路径规范化（即从URL路径中移除不需要或危险的部分）而添加的新代码更改引入的，但它在检测编码路径遍历字符“点点斜杠（../）”的不同技术方面存在不足。...

RCE_CVE-2024-7954-

RCECVE-2024-7954- SPIP 4.30-alpha2、4.2.13 和 4.1.16 之前版本使用的 porteplume 插件存在任意代码执行漏洞。远程未认证的攻击者可以通过发送特制的 HTTP 请求，以 SPIP 用户的身份执行任意 PHP 代码。（严重） 利用方式： POST /index.php?action=porteplumeprevisu HTTP/1.1 Host: Hostname Content-Type: application/x-www-form-urlencoded data=AA-URLBB 使用工具： Nuclei -ltarget fil...