BadHost-CVE-2026-48710-Exploit

BadHost — Escáner CVE-2026-48710 Escáner de solo detección para la omisión de autenticación BadHost en Starlette / FastAPI — donde el middleware de autenticación lee request.url.path en lugar de request.scope"path", permitiendo que una cabecera Host manipulada introduzca una ruta permitida y omit...

CVE-2026-46645-Analysis-Lab

CVE-2026-46645 - SQLAdmin ajaxlookup 授权绕过 执行摘要 此仓库包含一个本地 Docker 实验环境，用于复现 CVE-2026-46645，这是一个影响 SQLAdmin 的 ajaxlookup 端点的授权绕过漏洞。 SQLAdmin 是 Starlette 和 FastAPI 应用中 SQLAlchemy 模型的管理界面。当应用程序使用 isaccessiblerequest 限制 ModelView 时，SQLAdmin 的 ajaxlookup 路由在返回查找结果前未强制执行相同的访问控制决策，从而产生该漏洞。 该实验环境对比了两个...

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

SummaryQuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addition to &. The WHATWG URL standard, modern browsers, and Python's urllib.parse since the CVE-2021-23336 fix treat only & as a separator. This creates a parser differential: the same bytes a...

GHSA-6JV3-5F52-599M python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

Summary QuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addition to &. The WHATWG URL standard, modern browsers, and Python's urllib.parse since the CVE-2021-23336 fix treat only & as a separator. This creates a parser differential: the same bytes...

CVE-2025-0182

A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue arises from the use of a vulnerable version of the starlette package =0.49 via fastapi, which was patched in fastapi version 0.115.3. The vulnerability can be exploited by sending...