EUVD-2026-105328

A OS command injection vulnerability exists in the batchupg functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2026-10141

The Totolink X2000R (version: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to an Unsigned Firmware flaw in the boa Firmware Update functionality. The root cause is the improper verification of cryptographic signatures (CWE-347); while the system checks for magic bytes and checksums, i...

EUVD-2026-105324

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

EUVD-2026-105323

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

CVE-2026-10139

A stack-based buffer overflow vulnerability exists in the Mcli functionality of the Totolink X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). An authenticated attacker can trigger this by sending a specially crafted HTTP request to the /boafrm/formUpload page. The vulnerability ...

CVE-2026-87861

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...

CVE-2026-87861

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...

AIOHTTP: Absolute-form request targets can spoof Request.scheme

Summary An attacker sending an absolute-form request can spoof the scheme used. Impact If user code depends on the Request.scheme attribute for anything security related, an attacker may be able to circumvent this logic, tricking the application into thinking a connection is encrypted when it is...

GHSA-F9XW-JH8M-3MWQ AIOHTTP: Absolute-form request targets can spoof Request.scheme

Summary An attacker sending an absolute-form request can spoof the scheme used. Impact If user code depends on the Request.scheme attribute for anything security related, an attacker may be able to circumvent this logic, tricking the application into thinking a connection is encrypted when it is...

CVE-2026-111756

A flaw was found in follow-redirects. When an application provides request headers in an array format, the library fails to remove sensitive credential headers before following a redirect to another host or an insecure protocol. A remote, untrusted server can exploit this flaw by issuing a redire...

AIOHTTP: Pure-Python parser request smuggling

Summary The pure Python parser is vulnerable to an HTTP request smuggling attack. Impact If users are using the Python parser AIOHTTPNOEXTENSIONS, or not a standard wheel installed, then an application may be vulnerable to a request smuggling attack. Workaround Switch to the default C parser...

GHSA-PQXQ-W44R-73XW AIOHTTP: Pure-Python parser request smuggling

Summary The pure Python parser is vulnerable to an HTTP request smuggling attack. Impact If users are using the Python parser AIOHTTPNOEXTENSIONS, or not a standard wheel installed, then an application may be vulnerable to a request smuggling attack. Workaround Switch to the default C parser...

EUVD-2026-104486

AIOHTTP: Pure-Python parser request smuggling...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

SAPGateBreaker-Exploit

CVE-2022-22536: HTTP Smuggling Through SAP's Front Door SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepe...

CVE-2026-23520

CVE-2026-23520 MCP API Remote Command Execution RCE PoC 📌 Overview This repository contains a Proof-of-Concept PoC exploit for a Remote Command Execution RCE vulnerability affecting applications that expose a vulnerable MCP API endpoint commonly /api/mcp/connect. The vulnerability allows executio...

CVE-2026-64591

A flaw was found in the Linux kernel's Intel IOMMU driver. This issue occurs because the driver attempts to disable I/O Page Fault IOPF handling for devices that never had it enabled, specifically when Shared Virtual Addressing SVA is used on hardware that does not support the PCI Page Request...

CVE-2026-113667

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response token into the provider verification request. Crafted token...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

CVE-2026-93856

A flaw was found in OpenStack Cinder. An authenticated user with project-level access can retrieve messages intended for other projects by issuing a message listing request to the Block Storage API. This flaw leads to information disclosure, exposing resource identifiers and status messages...