143175 matches found
apache_2.4.50
Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE python3 apache2.4.50.py -t...
CVE-2024-23997
YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...
CVE-2024-10511
CVE-2024-10511 CWE-287: Improper Authentication Summary Schneider Electric PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations PowerChute Serial Shutdown v1.2.0.301 and prior...
CVE-2015-1635
️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...
POC-CVE-2023-32681
POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...
CVE-2023-25690_lab
HTTP Request Smuggling via Apache proxy Environment Setup Infrastructure Component| Role| Version ---|---|--- Apache HTTP Server| Reverse Proxy| 2.4.55 vulnerable Spring Boot embedded Tomcat| Backend API| 4.x Java 21 SQLite| Database| — User ──► Apache :80 Proxy ──► Spring Boot :8080 Backend ──►...
fingerprintx
Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...
provisioner
Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...
burp-cc-bridge
CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...
Crimson-Cloak-ISH-wrapper-iOS-
Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...
CVE-2026-42945-NGINX-Rift-Toolkit
CVE-2026-42945 Nginx Rift Vulnerability Toolkit Comprehensive toolkit for scanning, patching, and testing CVE-2026-42945 - a critical RCE vulnerability in nginx Table of Contents Overview CVE Details Features Toolkit Components Requirements Installation Usage Workflow Examples Security...
API-SPY-API-PROBE
API-SPY 🕵️👻 A powerful directory brute-force tool designed for API reconnaissance and penetration testing. Automatically discovers hidden API endpoints, performs recursive subscanning, and probes HTTP methods for deeper API enumeration. Features ✨ Core Capabilities: 🎯 Fast endpoint discovery using...
Updated python-django package fixes security vulnerabilities
Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...
MGASA-2026-0510 Updated python-django package fixes security vulnerabilities
Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...
CVE-2021-41773h
CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...
[SECURITY] Fedora 43 Update: httpd-2.4.69-1.fc43
The Apache HTTP Server is a powerful, efficient, and extensible web server...
CLEANSTART-2026-MH20908 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
CVE-2026-97032 affects multiple packages. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. See references for individual vulnerability details...
CLEANSTART-2026-IS42310 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...
CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...
CLEANSTART-2026-XJ89582 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
CVE-2026-78669 affects multiple packages. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values. See references for individual vulnerability...