35852 matches found
MSMQ-Vulnerability
MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...
CVE-2026-46456
CVE-2026-46456 — camel-aws2-sqs Inbound Message-Attribute Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Sprin...
CVE-2025-32433.py
CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...
activemq-cve-lab
ActiveMQ Message Broker Overview ActiveMQ message broker application with message import/export functionality. Version: 5.11.1 Features Message queue management Queue statistics and monitoring Message file import/export Real-time broker status Quick Start Docker docker-compose up -d Access:...
CVE-2023-21554
MSMQ Vulnerability Proof of Concept This repository contains a ready-to-run proof of concept that targets Microsoft Message Queuing listening on TCP port 1801. This work is based on and uses materials from the original project at https://github.com/leongxudong/MSMQ-Vulnerability This repository...
DEBIAN-CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
DEBIAN-CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The subject of the forwarded message was used verbatim to generate the attachment name, so a received message whose subject contains CRLF...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
EUVD-2026-107702
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
CVE-2026-114725
Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 are vulnerable to a mail header injection vulnerability. The root cause is that the rcmail_sendmail function only stripped newline characters from the Subject and Organization headers, leaving other header values taken from request p...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...
LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability
Exploit Title: LetterPress CLICK THIS" in HTML Campaign Message input field and click on Save Campaign. 2. View the campaign and click on "CLICK THIS" hyperlink it will redirect to the 3rdparty site. Ex:evil.com...
CVE-2024-27304-PoC
CVE-2024-27304-PoC references DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp A simple web application with login functionality. Only administrators can log in. This application uses PostgreSQL...
CVE-2025-61765_PoC
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...
CVE-2026-52134-libiec61850
CVE-2026-52134: GOOSE replay and message-freshness handling in libiec61850 v1.6 Status CVE-2026-52134 has been assigned. Publication of the corresponding CVE Record is pending. Affected product Vendor: MZ Automation GmbH Product: libiec61850 Tested version: 1.6 Status of other versions: Not...
CLEANSTART-2026-VF53508 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through
CVE-2026-84782 affects multiple packages. Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. See references for individual vulnerability details...
PT-2026-120957
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail sendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...