⤷ Title: CTF with CSRF involving referrer header
════════════════════════
𐀪 Author: Arunoday Tiwari
════════════════════════
ⴵ Time: Tue, 06 May 2025 20:53:37 GMT
════════════════════════
⌗ Tags: #header_injection #cybersecurity #ctf_writeup #bug_bounty_writeup #csrf
════════════════════════
𐀪 Author: Arunoday Tiwari
════════════════════════
ⴵ Time: Tue, 06 May 2025 20:53:37 GMT
════════════════════════
⌗ Tags: #header_injection #cybersecurity #ctf_writeup #bug_bounty_writeup #csrf
Medium
CTF with CSRF involving referrer header
Recently ,I played a CTF where I was supposed to perform CSRF attack to change email address of a user. The application used referrer…
⤷ Title: Broken Access Control part-10 : URL-based access control can be circumvented
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 14:56:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #url_access_bypass #forced_browsing #broken_access_control #header_injection
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 14:56:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #url_access_bypass #forced_browsing #broken_access_control #header_injection
Medium
Broken Access Control part-10 : URL-based access control can be circumvented
Hallo CyberExplorer . . . . . .
⤷ Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
⤷ Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
⤷ Title: Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 14:00:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #Authentication Bypass #CVE_2026_53913 #CVE_2026_55994 #Header injection #ssrf #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 14:00:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #Authentication Bypass #CVE_2026_53913 #CVE_2026_55994 #Header injection #ssrf #Vulnerability
Daily CyberSecurity
Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF
TL;DR The Apache Camel project patched four high-severity flaws across five components. Three Apache Camel vulnerabilities let an attacker inject Camel control headers, which triggers server-side …
⤷ Title: ASUSTOR Fixes Critical ADM Flaw CVE-2026-105324 That Lets Attackers Read NAS Files Without Login
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 02:22:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADM #Arbitrary File Read #ASUSTOR #CVE_2026_105324 #Header injection #NAS security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 02:22:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADM #Arbitrary File Read #ASUSTOR #CVE_2026_105324 #Header injection #NAS security
Daily CyberSecurity
ASUSTOR Fixes Critical ADM Flaw CVE-2026-105324 That Lets Attackers Read NAS Files Without Login
TL;DR ASUSTOR has patched CVE-2026-105324, a critical ASUSTOR ADM vulnerability with a CVSS 4.0 score of 9.2. The flaw lets an unauthenticated remote attacker read arbitrary files on a NAS device.…
⤷ Title: Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 09:58:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Email Security #Header injection #IMAP Command Injection #Roundcube #ssrf #webmail #XSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 09:58:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Email Security #Header injection #IMAP Command Injection #Roundcube #ssrf #webmail #XSS
Daily CyberSecurity
Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
TL;DR Roundcube released versions 1.6.20 and 1.7.5 on October 19, 2026, fixing 20 security issues. This Roundcube security update covers IMAP command injection, mail header injection, XSS, SSRF an…