147084 matches found
nuclei-burp-plugin
Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...
CVE-2025-55702
When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body left on the client connection as the next request. An attacker behind a front-end proxy that shares connections to Traffic Server can use this to smugg...
CVE-2025-55702
Apache Traffic Server versions 8.0.0 through 8.1.11 , 9.0.0 through 9.2.15 , 10.0.0 through 10.1.4 , and 10.2.0 are vulnerable to a request smuggling flaw. The root cause occurs when a client sends a POST request with Expect: 100-continue and the origin responds before the body is read; the serve...
EUVD-2025-211168
When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body left on the client connection as the next request. An attacker behind a front-end proxy that shares connections to Traffic Server can use this to smugg...
CVE-2025-31699
Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, including when the client used Expect: 100-continue. The origin then reads a later request on that connection as leftover body dat...
EUVD-2025-211167
Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, including when the client used Expect: 100-continue. The origin then reads a later request on that connection as leftover body dat...
CVE-2025-31699
Apache Traffic Server is vulnerable to a request smuggling issue where it returns an origin connection to the shared pool while the origin is still waiting for a declared request body. This occurs even when the client uses Expect: 100-continue but fails to send the full body. The origin may then ...
CVE-2026-114493
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those...
CVE-2025-10352-POC
CVE-2025-10352 POC - Admin Account Creation 🛠️ POC for CVE-2025-10352: An unauthenticated endpoint in Melis Platform melis-core that allows creation of an administrator account via a crafted HTTP request to a specific admin endpoint. 🔗 References 📄 CVE-2025-10352 on MITRE 📄 Melis Platform Warning...
CVE-2026-111401 WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a through 3.0.3...
CVE-2026-111401
The Tailored Tools WordPress plugin (versions
EUVD-2026-107421
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those...
CVE-2026-114051
A flaw was found in vllm. A remote attacker can cause a Denial of Service DoS by sending a specially crafted inference request containing an oversized minimum token parameter and an omitted maximum token parameter. Due to improper input validation, this request triggers an unhandled exception tha...
CVE-2026-80743
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip ASoC xilinx formatterpcm component. This vulnerability arises when interrupt request IRQ handlers attempt to access driver data before it has been fully initialized during device setup. An interrupt occurring ...
nginx
CVE-2017-7529 당승표@portfolio10 Summary This lab exercise reproduces the cache vulnerability CVE-2017-7529 that occurs during the Nginx server's Range request handling process, and the actual behavior of the vulnerability Vulnerability: Possible exposure of cached data due to an error in Nginx Rang...
CVE-2026-76487
A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improp...
CVE-2026-113796
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6, Electron treated pages opened into a new window from links as application-initiated navigations instead of preserving the page...
Exploit for CVE-2026-109618
PHP CVE-2026-109618 / CVE-2026-109619 — DoS Attack Toolkit...
rep-chrome
rep+ rep+ is a lightweight Chrome DevTools extension inspired by Burp Suite's Repeater, now supercharged with AI. I often need to poke at a few requests without spinning up the full Burp stack, so I built this extension to keep my workflow fast, focused, and intelligent with integrated LLM suppor...