Browse / Injection and Smuggling

Injection and Smuggling

See it on the mapBypass libraryPayloads

Weaknesses in this class

• CRLF Injection109
• Improper Input Validation76
• HTTP Request Smuggling72
• XML External Entities (XXE)43
• Resource Injection35
• HTTP Response Splitting20
• Improper Handling of URL Encoding (Hex Encoding)5
• LDAP Injection5
• Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)4
• Improper Neutralization of HTTP Headers for Scripting Syntax4
• Improper Neutralization of Escape, Meta, or Control Sequences4
• LLM01: Prompt Injection3
• XML Injection3
• Improper Neutralization of Value Delimiters2
• Improper Neutralization of Formula Elements in a CSV File1
• Improper Output Neutralization for Logs1
• Improper Neutralization of Whitespace1
• File Content Injection1

Often found together with

• Cross-site Scripting52
• Code Execution47

Most upvoted Injection and Smuggling reports

AllValidInformativeN/ADuplicate

1. HTTP/3 Stream Dependency Cycle ExploitN/AImproper Input Validation · high · curl
   60 votes
2. CRLF Injection in `--proxy-header` allows extra HTTP headers (CWE-93)N/ACRLF Injection · curl
   42 votes
3. wcurl treats some URL operands after -- as curl optionsN/AImproper Neutralization of Value Delimiters · medium · curl
   23 votes
4. HTTP Request Smuggling Vulnerability Analysis - cURL Security ReportN/AHTTP Request Smuggling · medium · curl
   23 votes
5. Inconsistent URL Parsing in curl Leading to Potential SSRF and Access Control BypassN/AImproper Input Validation · low · curl
   22 votes
6. Incomplete Suppression of Transfer-Encoding: chunked Header in HTTP/2 After Redirect From HTTP/1.1N/AHTTP Request Smuggling · low · curl
   21 votes
7. CRLF injection in libcurl's SMTP client via --mail-from and --mail-rcpt allows SMTP command smugglingN/ACRLF Injection · medium · curl
   21 votes
8. CRLF Injection via Custom HTTP HeadersN/ACRLF Injection · curl
   20 votes
9. HTTP/2 and HTTP/3 Header Injection in curlN/AHTTP Response Splitting · curl
   20 votes
10. Protocol Smuggling / CRLF Injection via Gopher Protocol allows Arbitrary Command InjectionN/ACRLF Injection · high · curl
    20 votes
11. SMTP CRLF injection in custom SMTP recipient operand allows additional SMTP commands after authenticationN/ACRLF Injection · medium · curl
    19 votes
12. libcurl: HTTP/1.x bare LF byte in response header value enables cookie jar pollution and POST body/credential exfiltration via redirect — RC=0, curl 8N/AHTTP Response Splitting · high · curl
    18 votes
13. SMTP Command Injection Vulnerability in libcurl 8.16.0 via RFC 3461 SuffixN/ACRLF Injection · curl
    18 votes
14. RTSP CRLF injection in libcurl allows CURLOPT_RTSP_* values to inject commands into independent sessionsN/ACRLF Injection · medium · curl
    17 votes
15. In curl's SASL OAUTHBEARER authentication, including the SOH character (0x01) in the username corrupts the message structure.N/AImproper Neutralization of Value Delimiters · medium · curl
    17 votes
16. SMTP CRLF Injection & Protocol Desynchronization in libcurlN/ACRLF Injection · medium · curl
    16 votes
17. Unsafe Global IFS Modification in OS400 Shell Script Enables Command Injection and Parsing Flaws (CWE-78/CWE-20)N/AImproper Input Validation · high · curl
    15 votes
18. Security Vulnerability Report: Protocol Injection via Programmatic OptionsN/ACRLF Injection · curl
    14 votes
19. [engineeringblog.yelp.com] CRLF InjectionN/ACRLF Injection · Yelp
    14 votes
20. CURLOPT_HAPROXY_CLIENT_IP lacks input validation, enabling HAProxy PROXY protocol injectionN/ACRLF Injection · medium · curl
    13 votes
21. Logical Flaw in curl_url_set Leads to Inconsistent Query Parameter EncodingN/AImproper Input Validation · medium · curl
    10 votes
22. SMB access smuggling via FILE URL on WindowsN/AImproper Input Validation · curl
    10 votes
23. CRLF Injection in HAProxy PROXY Protocol via CURLOPT_HAPROXY_CLIENT_IP allows IP spoofing and protocol injectionN/ACRLF Injection · medium · curl
    9 votes
24. CRLF Injection in Gopher Protocol (`lib/gopher.c`)N/ACRLF Injection · medium · curl
    9 votes
25. HTTP Request Smuggling and SSRF via CRLF Injection in Curl_add_custom_headersN/AHTTP Request Smuggling · high · curl
    9 votes
26. Terminal Output Not GreatN/AImproper Neutralization of Escape, Meta, or Control Sequences · low · curl
    8 votes
27. SMTP CRLF Injection in curl/libcurl via MAIL FROM/RCPT TO parametersN/ACRLF Injection · critical · curl
    8 votes
28. Arbitrary File Deletion Vulnerability in curl Source Code via os.unlink()N/AImproper Input Validation · high · curl
    8 votes
29. CRLF injection in the HTTP request-line via `CURLOPT_REQUEST_TARGET` (`--request-target`)N/ACRLF Injection · high · curl
    6 votes
30. CRLF injection in the RTSP request-line and Transport header via `CURLOPT_RTSP_STREAM_URI` and `CURLOPT_RTSP_TRANSPORT`N/ACRLF Injection · high · curl
    6 votes
31. SMTP Protocol Injection via CRLF in CURLOPT_MAIL_FROM leading to Email SpoofingN/ACRLF Injection · curl
    6 votes
32. netrc crlf injectionN/ACRLF Injection · curl
    6 votes
33. urlapi: CURLUPART_HOST accepts text after an IPv6 zone ip and URL round trip changes the hostN/AImproper Input Validation · low · curl
    5 votes
34. SMTP Command Injection via CRLF in libcurl MAIL_FROM / MAIL_RCPT (lib/smtp.c)N/ACRLF Injection · curl
    5 votes
35. CRLF Injection in HTTP header values allows arbitrary header injectionN/ACRLF Injection · curl
    5 votes
36. CRLF Injection / Protocol Smuggling in libcurl via CURLOPT_USERNAME (IMAP)N/ACRLF Injection · critical · curl
    5 votes
37. curl mishandles `%0c%0b` sequences in HTTP responses leading to CRLF confusions, Headers and Cookies InjectionN/ACRLF Injection · curl
    5 votes
38. AWS Load Balancer Controller Managed Security Groups can be replaced by an unprivileged attackerN/AResource Injection · medium · Kubernetes
    $5005 votes
39. AWS Load Balancer Controller can be used by an attacker to modify rules of any Security Group that they are able to tagN/AResource Injection · medium · Kubernetes
    $5003 votes
40. server filename with control characters printed to terminal (`-J`)N/AImproper Neutralization of Escape, Meta, or Control Sequences · low · curl
    2 votes
41. Derived cookie Path aborts cookie jar loading in curl 8.23.0N/AImproper Input Validation · low · curl
    2 votes
42. Host Header Injection or cache poisoning in multiple domainsN/ACRLF Injection · Inflection
    2 votes
43. invalid URL parsing with and '@'N/AHTTP Response Splitting · low · OWOX, Inc.
    2 votes