35482 matches found
web-traffic-generator
web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...
CVE-2025-45250
CVE-2025-45250 Descripción sugerida root@kitploit: MrDoc =0.95 es vulnerable a Server-Side Request Forgery SSRF en la función validateurl del archivo appdoc/utils.py. POC root@kitploit: POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent...
cdb
Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...
EUVD-2026-69714
A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...
CVE-2022-22947-POC
Spring-Cloud-Gateway-CVE-2022-22947 Spring Cloud Gateway远程代码执行漏洞的安全公告。该漏洞为当Spring Cloud Gateway启用和暴露 Gateway Actuator 端点时，使用 Spring Cloud Gateway 的应用程序可受到代码注入攻击。攻击者可以发送特制的恶意请求，从而远程执行任意代码。 【受影响版本】 Spring Cloud Gateway = 3.1.1 Spring Cloud Gateway = 3.0.7 Spring Cloud Gateway 是基于 Spring Framework 和...
Filebeat 8.19.18, 9.3.1 Security Update (ESA-2026-165)
Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...
cve-2024-24919
侦察工具 安装 1. git clone https://github.com/satchhacker/cve-2024-24919.git 2. cd cve-2024-24919 3. chmod +x cve-2024-24919.sh 4. ln -s $pwd/cve-2024-24919.sh /usr/bin/cve-2024-24919.sh 要使用该工具，只需运行： cve-2024-24919 使用方法 该工具将对您提供的域名文件中的 IP/域名发起 curl 请求，并检测 CVE-2024-24919 免责声明...
CVE-2026-19118
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...
CVE-2021-41773
Uso root@kitploit: usage: main.py -h -f FILE -s N --timeout SECONDS optional arguments: -h, --help show this help message and exit -f FILE, --file FILE File containing target URLs one per line -s N, --semaphore N Concurrent requests default: 10 --timeout SECONDS Request timeout in seconds default...
payloads
payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...
CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC
Apache CXF XOP Include 本地文件包含 CVE-2022-46364 概述 本仓库包含针对 CVE-2022-46364 的概念验证 PoC 利用程序，这是 Apache CXF 中的一个本地文件包含 LFI 漏洞。 该漏洞是由于 SOAP 请求中 XOP（XML 二进制优化打包）Include 元素处理不当引起的，允许攻击者读取服务器上的任意文件。 漏洞详情 CVE ID: CVE-2022-46364 组件: Apache CXF 漏洞类型: 本地文件包含 LFI 攻击向量: 远程（某些情况下无需认证） 影响: 服务器任意文件读取 根本原因 Apache CXF...
CVE-2019-8997
CVE-2019-8997 BlackBerry AtHoc 早于 7.6 HF-567 版本的管理系统（控制台）中存在一个 XML 外部实体注入（XXE）漏洞，攻击者可能通过在现有字段中输入恶意构造的 XML，从而读取应用服务器上的任意本地文件或向网络发出请求。 报告人 Nolan B. Kennedy nxkennedy 安全公告 http://support.blackberry.com/kb/articleDetail?articleNumber=000047227 https://nvd.nist.gov/vuln/detail/CVE-2019-8997 博文...
dp_crypto
dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...
httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...
CVE-2026-74835
The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4...
CVE-2026-74835 inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4...
EUVD-2026-69238
The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4...
CVE-2024-10085
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform...
EUVD-2024-55737
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform...