1617 matches found
ROOT-APP-PYPI-CVE-2024-27306 CVE-2024-27306 in aiohttp - Patched by Root
Root has patched CVE-2024-27306 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-49082 CVE-2023-49082 in aiohttp - Patched by Root
Root has patched CVE-2023-49082 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-49081 CVE-2023-49081 in aiohttp - Patched by Root
Root has patched CVE-2023-49081 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-23829 CVE-2024-23829 in aiohttp - Patched by Root
Root has patched CVE-2024-23829 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34520 CVE-2026-34520 in aiohttp - Patched by Root
Root has patched CVE-2026-34520 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CVE-2024-23334
CVE-2024-23334 Proof-of-Concept for LFI/Path Traversal vulnerability in Aiohttp = !IMPORTANT This script is for meant for educational purposes only. Any illegal usage is strictly prohibited. How to run? $ git clone https://github.com/wizarddos/CVE-2024-23334 $ cd CVE-2024-23334 $ python3 exploit....
poc-cve-2024-23334
poc-cve-2024-23334 This repository contains a proof of concept about the exploitation of the aiohttp library for the reported vulnerability CVE-2024-23334. This was created for two reasons: 1. Educational purposes: for those who are starting in application security, it is helpful to see the steps...
CLSA-2026-1791189274 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.10.11.post1+tuxcare...
CVE-2024-23334
CVE-2024-23334 !IMPORTANT Keep in mind that sometimes aiohttp may be configured in another folder and not in the static one, if that is the case change the value of the folder variable in the script. How To Use Exploit !CAUTION Disclaimer: This script is made for ethical uses...
CVE-2024-23334-PoC
CVE-2024-23334-PoC This repository is a proof of concept POC for CVE-2024-23334, demonstrating an attempt to replicate the bug in aiohttp that leads to Local File Inclusion LFI. !CAUTION Disclaimer: This POC is for educational purposes only. DO NOT use it in real-world scenarios. Install 1. Clone...
CVE-2024-23334
CVE-2024-23334 Exploit and PoC This repository contains a Proof of Concept PoC exploit for CVE-2024-23334, demonstrating a vulnerability in a web application that allows unauthorized access to sensitive files on the server. The PoC includes a Dockerized web server and an exploit script to test fo...
CVE-2024-23334-PoC
CVE-2024-23334-PoC A proof of concept of the path traversal vulnerability in the python AioHTTP library = 3.9.1 make sure to find a valid public facing directory such as "/static/" or "/assets/" Once you find it, go in main.py and replace the /static/ string with the one you found...
CVE-2025-29927
CVE-2025-29927 Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process large URL lists, detect vulnerabilities, and save results. Features connection pooling, caching, and chunked processing for fast performance...
Security Bulletin: Vulnerability in aiohttp bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.
Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the aiohttp library, which is affected by multiple vulnerabilities, including HTTP request smuggling and out-of-bounds read vulnerabilities. CVE-2026-69243, CVE-2026-69244. Vulnerability Details CVEID:CVE-2026-69243...
sub404
Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...
cve-2026-69243-poc-aiohttp-smuggling
CVE-2026-69243 — Contrabando de solicitudes en aiohttp CWE-444 Contrabando de solicitudes mediante una actualización WebSocket rechazada en aiohttp O compila la versión en Rust cero dependencias, solo std: git clone https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling cd...
CVE-2024-23334-PoC
CVE-2024-23334-PoC Una prueba de concepto de la vulnerabilidad de path traversal en la librería AioHTTP de Python = sudo apt install python3-venv Configuración del laboratorio git clone https://github.com/z3rObyte/CVE-2024-23334-PoC cd CVE-2024-23334-PoC python3 -m venv .env chmod +x...
aiohttp-exploit-CVE-2024-23334-certstream
Collect domains fromcertstream.calidog.io. Check forPython aiohttp in the response headers. Attempt to exploit CVE-2024-23334 Successful attempts sent to discord via webhook...
CVE-2024-23334-PoC
CVE‑2024‑23334 Path Traversal - PoC I created this script to automate the exploitation of CVE‑2024‑23334 on the Hack The Box Chemistry machine. This vulnerability affects aiohttp versions ≥ 1.0.5 and 3.9.2 when the application is configured to serve static files with followsymlinks=True, allowing...