134922 matches found
Security update for docker-stable
This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
CVE-2026-40022
camel-platform-http-main Authentication Bypass on Non-Root Context Paths CVE-2026-40022 This project demonstrates an authentication bypass in Apache Camel's camel-platform-http-main component the embedded HTTP / management server of the Camel main runtime, tracked as CVE-2026-40022. When...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...
CVE-2026-44789-n8n-PrototypePollution-RCE
CVE-2026-44789 — n8n HTTP Request Node Pagination Prototype Pollution → RCE An authenticated n8n The public advisory states only that the pollution "combined with other techniques could lead to RCE" — it does not disclose a gadget. This repo documents and automates a concrete, verified...
CVE-2026-42530
CVE-2026-42530 Сканер для CVE-2026-42530, use-after-free в HTTP/3-модуле nginx. Затронуты: nginx 1.31.0, 1.31.1 Исправлено: nginx 1.31.2 Использование pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt Принцип работы Открывает два...
CVE-2026-23744
CVE-2026-23744 Description MCPJam inspector is a local-first development platform for MCP servers. The versions =1.4.2 are vulnerable to remote code execution vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Fo...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb Exploit Tool Author : polar bear Version : 2.1 Applicable Vulnerability : CVE-2026-49975 HTTP/2 Protocol Memory Bomb 📖 Vulnerability Principle CVE-2026-49975 is a memory exhaustion vulnerability in the HTTP/2 protocol implementation. The attack chain consists of two key...
CVE-2026-33186
CVE-2026-33186 gRPC-Go RBAC Authorization Policy Bypass via Missing :path Slash Auth Bypass Description The authz package in google.golang.org/grpc implements SDK-level RBAC authorization using deny and allow rules matched against the :path pseudo-header. The HTTP/2 server transport stores the ra...
CVE-2026-40859
camel-netty-http / camel-vertx-http HTTP-Response Unsafe Deserialization Reproducer CVE-2026-40859 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-netty-http and camel-vertx-http components, tracked as CVE-2026-40859. When a producer endpoint is configured...
rapid-reset-check
Rapid Reset Check rapid-reset-check is a small Go CLI for quickly inventorying HTTPS endpoints that expose HTTP/2 and therefore need a CVE-2023-44487 mitigation review. The scanner is deliberately non-exploitative. It resolves each target, opens a certificate-verified TLS connection, offers h2 an...
CVE-2025-5349-Scanner
CVE-2025-5349 Vulnerability Scanner Usage python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...
CVE-2026-46588
camel-couchdb CouchDb Header Injection Reproducer CVE-2026-46588 This project demonstrates a message-header injection in Apache Camel's camel-couchdb component, tracked as CVE-2026-46588. The component reads several Exchange headers to control its behaviour — CouchDbDatabase, CouchDbSeq, CouchDbI...
CVE-2021-41773h
CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...
CVE-2025-69219
CVE-2025-69219 — Apache Airflow Providers HTTP RCE via Unsafe Pickle Deserialization Severity: High CVSS 3.1: 8.8 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-913 — Improper Control of Dynamically-Managed Code Resources Affected: apache-airflow-providers-http = 5.1.0, Fixed in:...
Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution
The Oracle WebLogic Server component of Oracle Fusion Middleware Web Services versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic...
Oracle WebLogic Server Administration Console - Remote Code Execution
The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...
CVE-2021-41773-PoC
CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 This script test Apache HTTP Server 2.4.49 Usage: CVE-2021-41773.py options Only for one IP: python CVE-2021-41773.py IPaddress Option -f For IP list in file Example: python CVE-2021-41773.py -f...
CVE-2024-27316
CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...
CVE-2026-42530
🛡️ CVE-2026-42530 - NGINX HTTP/3 QUIC Use-After-Free Vulnerability High-Severity Use-After-Free in NGINX HTTP/3 QUIC ⚠️ QPACK Encoder Stream Vulnerability 🔍 Overview CVE-2026-42530 is a use-after-free vulnerability in NGINX's ngxhttpv3module. A remote unauthenticated attacker can trigger it by...