CVE-2026-21962

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Plug-in Обход контроля доступа через несогласованность нормализации URI Независимо воспроизведённый эксплойт и анализ для CVE-2026-21962 некорректный контроль доступа, CVSS 10.0 в Oracle HTTP Server / Proxy Plug-in Oracle WebLogic Server...

CVE-2026-26128

CVE-2026-26128 Инструмент на Python для эксплуатации отражения Kerberos через нормализацию Unicode в Windows Active Directory. Основан на исследовании Guillaume André / Synacktiv. Установка Эти инструменты совместимы только с Python 3.8+. Клонируйте репозиторий с GitHub, установите зависимости — ...

CVE-2026-2395

CVE-2026-23950 Доказательство концепции для CVE-2026-23950 — уязвимость состояния гонки в пакете tar. Описание Данный репозиторий демонстрирует уязвимость состояния гонки в npm-пакете tar версия 7.5.3, которая допускает коллизию файлов при извлечении. Уязвимость использует различия в нормализации...

CVE-2026-25890-FileBrowser-Access-Control-Bypass

CVE-2026-25890 - Обход контроля доступа в FileBrowser Неаутентифицированные пользователи не могут использовать эту уязвимость — требуются действительные учётные данные с низкими привилегиями, ограниченные для целевого пути. Обход авторизации на основе пути в FileBrowser ≤ v2.57.0 с использованием...

cve-2026-21962

CVE-2026-21962 — ПОВЫШЕНИЕ ПРИВИЛЕГИЙ / УДАЛЁННОЕ ВЫПОЛНЕНИЕ КОДА ЧЕРЕЗ ОБХОД ПУТИ ИЗ-ЗА НОРМАЛИЗАЦИИ URI Обнаружил: gregk4sec https://github.com/gregk4sec/cve Дата обнаружения: 2025-09-24 Затронутый поставщик: Oracle Затронутый продукт: Oracle OHS / Плагин прокси-сервера WebLogic для Apache HTTP...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve를 통한 디렉터리 보호 우회 → PUT 기반 RCE🚨🚨 요약 CVE-2025-55752는 버그 60013을 수정하는 과정에서 Apache Tomcat에 도입된 보안 회귀regression입니다. Rewrite Valve가 사용될 때 Tomcat은 URL 디코딩 전에 경로 정규화path normalization를 적용합니다. 이 잘못된 순서로 인해 조작된 URI가 /WEB-INF/ 및 /META-INF/와 같은 보호 경로에 대해...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

Эксплойт для CVE-2021-41773 и CVE-2021-42013 Атака path traversal и RCE в Apache/2.4.49-2.4.50 Возможности - Принимает список URL - Работает как для CGI, так и для non-CGI - Работает для Apache/2.4.49 - 2.4.50 Использование $ git clone...

livewire-vuln-scanner

Livewire Passive Vulnerability Scanner Livewire Passive Vulnerability Scanner is a Python 2.7 tool designed to passively detect Livewire versions used by websites and identify potential vulnerabilities based on version comparison. This scanner does not exploit any vulnerability. It only analyzes...

code-shield

protocol-remediator An MVP that normalizes vulnerability findings in C/C++ protocol/platform code into reproducible evidence and validates candidate patches in isolated copies. code-shield was a working name with a confirmed name-collision risk, so a neutral internal name is used for the public...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a...

traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization

CVE-2026-48020 — Traefik StripPrefix Route-Level Auth Bypass PoC A self-contained proof of concept for CVE-2026-48020 , a route-level authentication/authorization bypass in Traefik's StripPrefix middleware caused by path normalisation happening after routing decisions are made. A request such as...

CVE-2023-46404

CVE-2023-46404 PCRS is a webapp for online programming exercises developed at the University of Toronto. See Bitbucket repository: https://bitbucket.org/utmandrew/pcrs/src/3.11/ Summary PCRS “Questions” page with code submission and “Code editor” page are vulnerable to remote code execution RCE b...

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

CVE-2025-52488

DNN Unicode Path Normalization NTLM Hash Disclosure Exploit CVE-2025-52488 Overview This exploit targets a vulnerability in DNN formerly DotNetNuke versions 6.0.0 to before 10.0.1 that allows attackers to disclose NTLM hashes through Unicode path normalization attacks. Vulnerability Details CVE I...

CVE-2026-94269

Apache APISIX versions 2.14.1 through 3.18.0 are vulnerable to a Use of Non-Canonical URL paths for authorization decisions vulnerability. In configurations where a permissive route overlaps a protected one, an attacker can use a crafted encoded path to bypass intended security policies. This mis...

CVE-2026-94269 Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch

Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations where a permissive route overlaps a protected one, a crafted encoded path can reach an upstream endpoint that the matched route's policies were never meant to cover. A request that...

AlmaLinux 9.2 [TuxCare] Security Update: python3-setuptools / python3-setuptools-wheel (ALMALINUX9.2:CLSA-2026:1786468462)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786468462 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList...

Rocky Linux 9 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel (crlsa-2025_0312)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250312 advisory. raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 10.2 [CIQ] Security Update: cockpit-image-builder Multiple Vulnerabilities (crlsa-2026_71543)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202671543 advisory. fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75899 fast-uri: fast-uri: Server-side request forgery v...