param-miner

param-miner This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities. It combines advanced diffing logic from Backslash Powered Scanner with a binary search technique to guess up to 65,000 param names per request. Param names...

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner WCVS는 Hackmanit과 Maximilian Hildebrand가 개발한 웹 캐시 포이즈닝 및 웹 캐시 디셉션을 위한 빠르고 다재다능한 CLI 스캐너입니다. 이 스캐너는 다양한 웹 캐시 포이즈닝 및 웹 캐시 디셉션 기법을 지원하며, 추가로 테스트할 URL을 식별하기 위한 크롤러를 포함하고, 특정 웹 캐시에 적응하여 더 효율적인 테스트를 수행할 수 있습니다. 또한 높은 사용자 정의가 가능하며 기존 CI/CD 파이프라인에 쉽게 통합될 수 있습니다. 기능 설치 옵션 1:...

fockcache

fockcache FockCache - 최소화된 테스트 캐시 포이즈닝 캐시 포이즈닝 상세 정보 : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache는 웹 페이지에서 X-Forwarded-Host 및 X-Forwarded-Scheme 헤더를 시도하여 캐시 포이즈닝을 시도합니다. 성공적인 결과 후, 포이즈닝된 URL을 제공합니다. 곧 추가 예정: 1 - 페이지 파라미터 체커 2 - 재귀적 체킹 설치 1 - installer.sh로 설...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – キーなしクエリパラメータによるHTTPキャッシュポイズニング 概要 WebキャッシュはURLパスのみをキャッシュキーとして使用し、クエリパラメータを無視します。攻撃者は、キーなしパラメータ（例: utmcampaign）に悪意のあるペイロードを追加してキャッシュを汚染する可能性があります。後続の訪問者は、任意のJavaScriptを含む汚染された応答を受け取ります。 脆弱性の詳細 タイプ: Webキャッシュポイズニング 影響: 保存型XSS、認証情報の窃取、改ざん。 根本原因:...

CVE-2026-15396

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

CVE-2026-15634

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

CVE-2026-15396

CVE-2026-15396 affects IBM WebSphere Application Server (traditional 8.5 and 9.0) and IBM WebSphere Application Server Liberty (versions 17.0.0.3–26.0.0.8). The root cause is improper parsing of the HTTP transfer-encoding request header (CWE-444), enabling HTTP request smuggling . An unauthentica...

CVE-2026-15396 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

EUVD-2026-78068

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

CVE-2026-15634 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

Astra Linux – Vulnerability in python-bottle

Packages from versions 0 and before 0.12.19 are vulnerable to Web Cache Poisoning, due to a mechanism called “parameter cloaking”. When attackers can separate query parameters using a semicolon ;, they can create a discrepancy in the interpretation of requests between the proxy running with defau...

Astra Linux – Vulnerability in python-django, python2.7

Packages containing “python/cpython” from versions 0 and earlier, including 3.6.13, 3.7.0 and earlier than 3.7.10, 3.8.0 and earlier than 3.8.8, 3.9.0 and earlier than 3.9.2, are vulnerable to Web Cache Poisoning via “urllib.parse.parseqsl” and “urllib.parse.parseqs”. This vulnerability occurs du...

Exploit for Use of Uninitialized Variable in Google Chrome

CVE-2026-11101 – HTTP Cache Poisoning via Unkeyed Query Parame...

CVE-2026-6324: Inconsistent Interpretation of HTTP Requests

A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the soupbodyinputstreamreadchunked function by sending a malicious HTTP request. This vulnerability occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-bottle (UTSA-2026-017473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017473 advisory. The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query...

CVE-2026-33397

The CVE concerns Angular SSR bottleneck/open-redirect in @angular/ssr. Affected series: 22.x before 22.0.0-next.2, 21.x before 21.2.3, and 20.x before 20.3.21, with a patch included in 22.0.0-next.2, 21.2.3, and 20.3.21. Root cause: incomplete fix for CVE-2026-27738 where a single backslash in X-...

CVE-2026-33397

The Angular SSR is a server-rise rendering tool for Angular applications. Versions on the 22.x branch prior to 22.0.0-next.2, the 21.x branch prior to 21.2.3, and the 20.x branch prior to 20.3.21 have an Open Redirect vulnerability in @angular/ssr due to an incomplete fix for CVE-2026-27738. Whil...

CVE-2026-33397: URL Redirection to Untrusted Site

The Angular SSR is a server-rise rendering tool for Angular applications. Versions on the 22.x branch prior to 22.0.0-next.2, the 21.x branch prior to 21.2.3, and the 20.x branch prior to 20.3.21 have an Open Redirect vulnerability in @angular/ssr due to an incomplete fix for CVE-2026-27738. Whil...

exploit-notes

🎯 Pentest Playbook Index Welcome to the comprehensive penetra...

EUVD-2026-5329

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...