⤷ Title: CTF with CSRF involving referrer header
════════════════════════
𐀪 Author: Arunoday Tiwari
════════════════════════
ⴵ Time: Tue, 06 May 2025 20:53:37 GMT
════════════════════════
⌗ Tags: #header_injection #cybersecurity #ctf_writeup #bug_bounty_writeup #csrf
════════════════════════
𐀪 Author: Arunoday Tiwari
════════════════════════
ⴵ Time: Tue, 06 May 2025 20:53:37 GMT
════════════════════════
⌗ Tags: #header_injection #cybersecurity #ctf_writeup #bug_bounty_writeup #csrf
Medium
CTF with CSRF involving referrer header
Recently ,I played a CTF where I was supposed to perform CSRF attack to change email address of a user. The application used referrer…
⤷ Title: Broken Access Control part-10 : URL-based access control can be circumvented
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 14:56:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #url_access_bypass #forced_browsing #broken_access_control #header_injection
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 14:56:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #url_access_bypass #forced_browsing #broken_access_control #header_injection
Medium
Broken Access Control part-10 : URL-based access control can be circumvented
Hallo CyberExplorer . . . . . .
⤷ Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
⤷ Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
⤷ Title: Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 14:00:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #Authentication Bypass #CVE_2026_53913 #CVE_2026_55994 #Header injection #ssrf #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 14:00:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #Authentication Bypass #CVE_2026_53913 #CVE_2026_55994 #Header injection #ssrf #Vulnerability
Daily CyberSecurity
Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF
TL;DR The Apache Camel project patched four high-severity flaws across five components. Three Apache Camel vulnerabilities let an attacker inject Camel control headers, which triggers server-side …