115118 matches found
CVE-2021-41773
使い方 root@kitploit: usage: main.py -h -f FILE -s N --timeout SECONDS optional arguments: -h, --help show this help message and exit -f FILE, --file FILE File containing target URLs one per line -s N, --semaphore N Concurrent requests default: 10 --timeout SECONDS Request timeout in seconds default...
CVE-2022-4361
CVE-2022-4361 説明 このリポジトリはCVE-2022-4361のPoCを含んでいます。 すべてのクレジットは発見の原著者であるmullikenに帰属します。 重要 : このPoCは完全ではなく、SAML認証プロトコルのAssertionConsumerServiceURL値に関するケースをカバーしていません。現在はOIDCケースのみ対応しています。 手順 1. このリポジトリをクローンします。 root@kitploit: git clone https://github.com/faccimatteo/CVE-2022-4361.git && cd...
CVE-2022-1592
CVE-2022-1592 POC root@kitploit: pip install requests --break-system-packages root@kitploit: CVE-2022-1592.py https://tatget.com/...
Important: Red Hat Security Advisory: yggdrasil-worker-package-manager security update
An update for yggdrasil-worker-package-manager is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
URL_CHECKER
URLフィッシングチェッカー 機械学習（ランダムフォレスト/SVM）とヒューリスティックなルールベース分析を組み合わせたハイブリッドアプローチにより、URLがフィッシングまたは安全である可能性 を検出する軽量なWebベースのツールです。 サイバーセキュリティと応用AIにおける教育目的および実験用に作成されました。 概要 フィッシング攻撃は、しばしば視覚的な欺瞞とURLの操作に依存します。このツールは、URLの構造と内容を分析して、その悪意のある意図を判断します。 主な機能 リアルタイム分析: URLを受け取り即座に処理します。 ハイブリッド検出:...
Olyx
Olyx 複数の脅威検出APIと高度なドメインスプーフィング検出を組み合わせ、悪意のあるWebサイトからユーザーを保護する、最新のAndroid向け包括的URLセキュリティ分析アプリケーションです。 スクリーンショット 機能 マルチAPIセキュリティ分析 AbuseIPDB : 報告された悪意のあるアクティビティについてIPレピュテーションをスキャン VirusTotal : 70以上のアンチウイルスエンジンに対してURLをチェック URLScan.io : 詳細なWebサイト行動分析を実行 リアルタイム結果 : 即時部分結果による段階的読み込み ドメインスプーフィング検出...
CVE-2026-96892
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...
React2Shell
React2Shell - CVE-2025-55182 & CVE-2025-66478 著者： LAKSHMIKANTHAN K（letchupkt） Instagram： @letchupkt バージョン： 2.0.0（難読化） 日付： 2025-12-07 🚀 クイックスタート スキャナーの実行 root@kitploit: python react2shell.py これだけです！スキャナーは次の処理を行います： 1. 整合性を検証 2. コードを解凍 3. 通常どおり実行 すべての機能は完全に同じ動作をします！ root@kitploit: 1 Scan Single URL...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2026-96892 Edimax BR-6428nC goform websRedirect redirect
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
React Native Community CLI - Unauthenticated OS Command Injection
The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...
RHEL 7 : host-metering (RHSA-2026:71619)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:71619 advisory. Host metering service Security Fixes: net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860...
UBUNTU-CVE-2026-97404
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Si...
MiracleLinux 9 : runc-1.4.2-3.el9_8 (AXSA:2026-1907:04)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1907:04 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 Tenable has extracted the preceding descriptio...
AlmaLinux 9 : skopeo (ALSA-2026:70641)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70641 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124463)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124463 advisory. The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the...
Linux Distros Unpatched Vulnerability : CVE-2026-97404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticate...
