BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 扫描器 仅用于检测 Starlette / FastAPI 中 BadHost 认证绕过漏洞的扫描器 —— 认证中间件读取 request.url.path 而非 request.scope"path"，使得精心构造的 Host 标头能够走私一个列入白名单的路径，从而绕过认证。 root@kitploit: GET /admin HTTP/1.1 Host: api.internal/health?badhost= Starlette sees request.url.path == "/health" → allowed ASGI...

CVE-2026-46645-Analysis-Lab

CVE-2026-46645 - SQLAdmin ajaxlookup Authorization Bypass Executive Summary This repository contains a local Docker lab for reproducing CVE-2026-46645, an authorization bypass vulnerability affecting SQLAdmin's ajaxlookup endpoint. SQLAdmin is an admin interface for SQLAlchemy models in Starlette...

GHSA-6JV3-5F52-599M python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

Summary QuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addition to &. The WHATWG URL standard, modern browsers, and Python's urllib.parse since the CVE-2021-23336 fix treat only & as a separator. This creates a parser differential: the same bytes...

CVE-2025-0182

A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue arises from the use of a vulnerable version of the starlette package =0.49 via fastapi, which was patched in fastapi version 0.115.3. The vulnerability can be exploited by sending...