Typecho-Multiple-Vulnerabilities

Múltiples Vulnerabilidades en Typecho Este repositorio contiene los exploits de las siguientes vulnerabilidades: CVE-2024-35538: En Typecho v1.3.0 existe una vulnerabilidad de Suplantación de IP del Cliente, que permite a actores maliciosos falsificar sus direcciones IP especificando una IP...

CVE-2021-26855_PoC

CVE-2021-26855PoC My early SSRF payloads CVE-2021-26855 over Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

CVE-2023-27100

CVE-2023-27100 - Omisión de protección anti-fuerza bruta en pfSense Descripción del problema El sistema de autenticación intenta ser informativo e imprime información adicional junto con las direcciones IP para identificar completamente desde dónde inicia sesión un usuario cuando lo hace a través...

CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview...

CVE-2025-8088-Winrar

CVE-2025-8088 Explotación WinRAR Herramienta avanzada de explotación transversal de ruta de WinRAR Una sofisticada herramienta GUI para crear archivos RAR maliciosos que explotan la vulnerabilidad de recorrido de ruta de WinRAR CVE-2025-8088 mediante la manipulación de encabezados ADS y RAR5...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

crlf-desyncs

CRLF Desyncs This is a repository containing useful tools and resources for detecting and exploiting CRLF-based Desyncs, presented at BlackHat USA 2026 and DEFCON 34. Contents cdn-origin/ - contains aggregated origin-to-edge headers useful for fuzzing a CRLF injection on a response...

MS15-034

MS15-034 MS15-034 POC La versión actual del servidor IIS es una versión vulnerable que contiene la vulnerabilidad conocida CVE-2015-1635, MS15-034. Al explotar esta vulnerabilidad, existe el riesgo de sufrir ataques como ejecución remota de código o provocar una pantalla azul. Sintaxis de prueba:...

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 & CVE-2025-29891 PoC CVE-2025–27636 and CVE-2025-29891 are vulnerabilities in Apache Camel that affect versions: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Exploitation of these vulnerabilities can enable attackers to execute internal Camel methods. The following is a...

cve-2022-21907

CVE-2022-21907 Golang Application by 1vere$k CVE-2022-21907 - Double Free in http.sys driver. Summary This is a multithreading Golang application wich allows make requests on few targets simultaneously. Not very productive with the POST requests but it provides nearly 30% of speed comparing to a...

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

CVE-2025-29927

CVE-2025-29927 - Demo for Introdcution to Secure Programming 00960267 Background This is a demo of CVE-2025-29927, a critical vulnerability in Next.js that allowed bypassing the middleware with a certain header. The header x-middleware-subrequest was intended to prevent infinite middleware loops...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authentication Bypass Advanced Bypass 🔥 Overview An advanced PoC for CVE-2025-29927 , allowing authentication bypass in Next.js Middleware by manipulating specific headers. This template enhances WAF evasion and security bypass techniques. 🚀 Features ✅...

CVE-2022-45059-demo

CVE-2022-45059-demo Varnish Cache releases 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 and 7.2.0 have a request smuggling vulnerability where an attacker can request that the content-length header is made hop-by-hop. This is a demo consisting of a Spring Boot web application running behind a...

struts-rce

:source-highlighter: pygments = Explotación de Apache Struts CVE-2017-5638 Esta aplicación web simple está construida con Apache Struts 2.5.10 vulnerable CVE-2017-5638. Es vulnerable a RCE. == Iniciando la aplicación web Para iniciar la aplicación web vulnerable, ejecute: mvn jetty:run La...

CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

IIS-Raid

IIS-Raid IS Raid is a native IIS module that abuses the extendibility of IIS to backdoor the web server and carry out custom actions defined by an attacker. Documentation When installed, IIS-Raid will process every request and method, check if the X-Password header exists and compare it against t...

CVE-2026-63621

CVE-2026-63621 — camel-knative structured CloudEvent header injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

HBSQLI

HBSQLI: Probador Automatizado para Inyección SQL Ciega Basada en Cabeceras HBSQLI es una herramienta automatizada de línea de comandos para realizar ataques de inyección SQL ciega basada en cabeceras en aplicaciones web. Automatiza el proceso de detección de vulnerabilidades de inyección SQL cieg...

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 Release Date 2017-03-07 Hazard Level High AV:N/AC:L/Au:N/C:C/I:C/A:C Affected Products Apache Struts =2.3.5, =2.5, CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value...