Zimbra Collaboration Suite - Cross-site Scripting

Cross-site scripting XSS vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite ZCS before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment. id:...

CVE-2023-24488

CVE-2023-24488 POC for CVE-2023-24488 Citrix Gateway Open Redirect and XSS CVE-2023-24488 URL query parameters are not adequately sanitised before they are placed into an HTTP Location header. An attacker can exploit this to create a link which, when clicked, redirects the victim to an arbitrary...

cve-2000-0649

CVE-2000-0649 for Apache CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server from the Location parameter in the respose header. Official details are here: Rapid7: https://www.rapid7.com/db/modules/auxiliary/scanner/http/iisinternalip/ CV...

CVE-2025-4123-Exploit

CVE-2025-4123 PoC A small proof-of-concept tool — sends a specific payload to a target and checks for 301/302 redirect responses, reporting the Location header. This repository is intended for educational/research purposes only. Follow responsible disclosure policies. Below are usage and build...

CVE-2026-118656

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...

Linux Distros Unpatched Vulnerability : CVE-2026-118656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with a...

CVE-2026-118656

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...

Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...

GHSA-V753-G4CW-JM48 Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...

CVE-2026-118658 Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...

CVE-2026-118658 Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...

CVE-2026-118656 Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...

CVE-2026-118656 Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...

EUVD-2026-112463

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...

CVE-2026-118656

The Echo Go web framework is vulnerable to an Open Redirect (CWE-601) in versions prior to 4.16.0 and 5.4.0 . The vulnerability exists because the sanitizeURI function only checks the first two bytes of a redirect target to determine if it starts with an absolute-path separator. Attackers can use...

CVE-2026-118656: URL Redirection to Untrusted Site

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143715 advisory. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the...

CVE-2026-78846

Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792616669)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792616669 advisory. - The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-char...

CLSA-2026-1792616669 php: Fix of 2 CVEs

CVE-2026-92842: fix out-of-bounds read in convert. stream filters when line-break-chars contains a NUL byte - CVE-2026-93682: fix out-of-bounds read on empty Location header in HTTP stream wrapper redirects...