CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability Vulnerability Summary A vulnerability in MikroTik RouterOS allows an unauthenticated remote attacker to force a router to reboot. This is done by sending a packet of the size of 1 byte to RouterOS's IPv6 address using IP proto 97. A...

CVE-2019-7609

CVE-2019-7609 docker lab setup for kibana-7609 Reference : https://github.com/mpgn/CVE-2019-7609 Open Kibana Past one of the following payload into the Timelion visualizer Click run On the left panel click on Canvas Your reverse shell should pop ! : payload by @securityMB...

CVE-2025-55182-Exploit

CVE-2025-55182 — Next.js Flight Deserialization RCE Remote Code Execution exploit for Next.js Server Actions Flight deserialization vulnerability 📌 Overview This repository contains a working exploit for CVE-2025-55182 , a deserialization vulnerability in the Next.js Flight protocol Server Action...

cakephp-trusted-proxies

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-trusted-proxies Write-up: https://abraxaslabs.tech/research/cakephp-trusted-proxies cakephp-trusted-proxies Class: HTTPS redirect bypass / IP-host spoof Reach: Remote CakePHP 5.4.2 887b641 - Cake Software...

branca (>=0.9.1, <=0.10.0), iop-coeus-node (0.0.15) +5 more potentially affected by unknown CVE via orion (>=0.15.3, <=0.16.1)

orion CARGO version =0.15.3, =0.9.1, =0.0.2, =0.0.2, =0.1.0, =0.4.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0426...

branca (>=0.9.1, <=0.10.0), iop-coeus-node (0.0.15) +5 more potentially affected by unknown CVE via orion (>=0.15.3, <=0.16.1)

orion CARGO version =0.15.3, =0.9.1, =0.0.2, =0.0.2, =0.1.0, =0.4.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0428...

CVE-2026-92474

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-118658

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-118658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded- Proto, X-Forwarded-Protocol, or X-Url-Scheme without...

CVE-2026-118658

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...

UBUNTU-CVE-2026-118658

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...

Echo: HTTPS Redirect And HSTS Bypass Via Unconditional Trust Of Forwarded Scheme Headers

Description "Context.Scheme" unconditionally trusts four client-controlled HTTP headers to determine the request scheme, with no mechanism to configure trusted sources. This allows a remote unauthenticated attacker to bypass HTTPS redirect enforcement and suppress HSTS headers. The trusted header...

Echo Has Arbitrary Scheme Injection In WWWRedirect/NonWWWRedirect Middlewares Via X-Forwarded-Proto

Summary The "c.Scheme" method in Echo "context.go:162-181" trusts the "X-Forwarded-Proto", "X-Forwarded-Protocol", and "X-Url-Scheme" request headers without validating that the value is "http" or "https". The "WWWRedirect" and "NonWWWRedirect" middlewares use this unsanitized scheme to construct...

Reliance on Untrusted Inputs in a Security Decision

Overview Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.Scheme method in Echo’s request context. A remote unauthenticated attacker can send X-Forwarded-Proto: https to an HTTP endpoint to bypass HTTPSRedirect, leaving users’...

Reliance on Untrusted Inputs in a Security Decision

Overview github.com/labstack/echo/v4/middleware is a middleware package for echo. Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.Scheme method in Echo’s request context. A remote unauthenticated attacker can send...

Reliance on Untrusted Inputs in a Security Decision

Overview Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.Scheme method in Echo’s request context. A remote unauthenticated attacker can send X-Forwarded-Proto: https to an HTTP endpoint to bypass HTTPSRedirect, leaving users’...

Reliance on Untrusted Inputs in a Security Decision

Overview github.com/labstack/echo/v5/middleware is a middleware package for echo. Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.Scheme method in Echo’s request context. A remote unauthenticated attacker can send...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the Scheme method in the Context component. An attacker can cause WWWRedirect, NonWWWRedirect, and their WithConfig variants to place an attacker-chosen URI scheme in the Location header by sending a request with a...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the Scheme method in the Context component. An attacker can cause WWWRedirect, NonWWWRedirect, and their WithConfig variants to place an attacker-chosen URI scheme in the Location header by sending a request with a...

DEBIAN-CVE-2026-118658

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...