george0papasotiriou/cve-2026-1010-websocket-connection-smuggling-via-malformed-upgrade-headerProof-of-concept exploit for CVE-2026-1010, demonstrating WebSocket connection smuggling and request splitting through a malformed Upgrade header…
theopaid/cve-2026-67181-http-request-smuggling-via-transfer-encoding-desynchronization-rouille-Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)
jmg0929/cve-2021-40346PoC exploit for CVE-2021-40346: HAProxy integer overflow enabling HTTP request smuggling and ACL bypass. Includes analysis, reproduction steps, and…
pjt3591oo/cve-2026-40175-pocProof-of-concept demonstrating CRLF injection and HTTP request smuggling in Axios, chaining prototype pollution to achieve SSRF and access internal…
boianeduard/cve-2021-40346HTTP Request Smuggling
razzlemouse/f5-big-ip-smuggleshell-cve-2023-46747-exploit#F5-BIG-IP-CVE-2023-46747-Exploit – Unauthenticated RCE Python exploit & Nuclei template by Raguraman ✓ Automated TCP reverse shell (LHOST/LPORT)…
martinfabianionut/cve-2025-55315Proof-of-concept exploit for CVE-2025-55315 (.NET HTTP Request Smuggling). Demonstrates how improperly parsed chunked encoding lets attackers smuggle…
zemarkhos/cve-2025-55315-poc-exploitCVE-2025-55315 PoC Exploit
sachinart/cve-2025-61882Multi-threaded scanner for CVE-2025-61882 in Oracle E-Business Suite, exploiting HTTP request smuggling to achieve unauthenticated remote code…
abhisek3122/cve-2025-23167Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2
oocyginxoo/cve-2023-25690-pocCVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…
moften/cve-2019-20372Nginx CVE-2019-20372 PoC, Unauthenticated File Upload Exploit
becodoexploit-mrcat/sapgatebreaker-exploitSAPGateBreaker is a PoC exploit for CVE-2022-22536, a critical HTTP Request Smuggling vulnerability in SAP NetWeaver. It demonstrates how to bypass…
soltanali0/cve-2024-40725exploit CVE-2024-40725 (Apache httpd) with
dhmosfunk/cve-2023-25690-pocCVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…
thanhlam-attt/cve-2023-25690Proof-of-concept exploit for CVE-2023-25690 HTTP Request Smuggling in Apache mod_proxy. Includes lab environment with Docker, BurpSuite walkthrough,…
vuongnv3389-sec/cve-2019-20372Proof-of-concept exploit for CVE-2019-20372: HTTP request smuggling via nginx error_page directive, enabling access to hidden resources.
tess-ss/sap-memory-pipes-desynchronization-vulnerability-mpi-cve-2022-22536Proof-of-concept exploit for CVE-2022-22536, demonstrating HTTP request smuggling and cache poisoning against SAP NetWeaver servers to compromise…
