1878 matches found
CVE-2026-34910-unifi-poc
UniFi OS CVE Proof of Concept Proof of concept for authorized testing of two vectors identified as: CVE-2026-34910: auth bypass that can lead to command injection and remote code execution via the package update handler. CVE-2026-34909: path traversal that can lead to arbitrary file read via the...
CVE-2021-41773
CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...
sudo-snooper
sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...
CVE-2025-57833
Django FilteredRelation Alias SQL Injection Vulnerability CVE-2025-57833 A SQL injection vulnerability in Django that emerged after about a year, at first glance it appears to be caused by an alias since aliases cannot be precompiled. This vulnerability affects the FilteredRelation feature in the...
CVE-2026-88391
Northstar dromara/northstar, quantitative trading platform = 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/, so /h2-console is exposed with no authentication and the embedded H2 DB uses default sa / empty password. Any network-reachable attacker can run arbitrary...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
CVE-2021-42013-Apache-RCE-Poc-Exp
Nombre de la vulnerabilidad Apache ejecución remota de código CVE-2021-42013 Descripción de la vulnerabilidad Apache HTTP Server es un servidor web de código abierto de la Apache Software Foundation. Este servidor se caracteriza por ser rápido, fiable y ampliable a través de una API simple. Se...
CVE-2019-9810-PoC
CVE-2019-9810-PoC Información incorrecta de alias en Array.prototype.slice Este error lo encontré el año pasado. Y fue una colisión con @fluoroacetate en p2o 2019. Se corrigió en Firefox 66.0.1...
dasel-hardened-container
dasel v3.3.1 hardened container This is a melange package and apko container image for dasel v3.3.1 with a build-time patch for CVE-2026-33320 unbounded YAML alias expansion. The image is built entirely from a locally-produced APK - no prebuilt upstream image is used. Prerequisites Tool| Tested...
graphql-cop
GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...
VHostScan
VHostScan Un escáner de hosts virtuales que puede usarse con herramientas de pivote, detectar escenarios de catch-all, alias y páginas predeterminadas dinámicas. Presentado por primera vez en SecTalks BNE en septiembre de 2017 presentación. Esta es una versión mejorada del VHostScan original...
apache_normalize_path
CVE-2021-41773|CVE-2021-42013: Vulnerabilidad de Path Traversal Zero-Day en Apache HTTP Server Explotada El 5 de octubre, el Proyecto Apache HTTP Server parcheó CVE-2021-41773, una vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server, un servidor web de código abierto...
CrackQL
CrackQL CrackQL es una utilidad de fuzzing y fuerza bruta de contraseñas para GraphQL. CrackQL es una herramienta versátil de pruebas de penetración para GraphQL que explota controles deficientes de limitación de velocidad y análisis de costos para realizar ataques de fuerza bruta a credenciales ...
cve-2021-42013-docker-lab
CVE-2021-42013 Introducción Se descubrió que la corrección para CVE-2021-41773 en Apache HTTP Server 2.4.50 era insuficiente. Un atacante podría utilizar un ataque de path traversal para asignar URLs a archivos fuera de los directorios configurados mediante directivas similares a Alias. Si los...
Minimus-Junior-Backend-Exercise
Ejercicio Junior de Backend — dasel v3.3.1 Paquete dasel v3.3.1 con Melange, construir una imagen de contenedor con apko y corregir CVE-2026-33320. Requisitos previos: Docker. Todos los pasos de compilación se ejecutan dentro de contenedores — no se necesita instalación local de melange/apko...
qu1ckdr0p2
About Rapidly host payloads and post-exploitation bins over HTTP or HTTPS. Designed to be used on exams like OSCP / PNPT or CTFs HTB / etc. Pull requests and issues welcome. As are any contributions. Qu1ckdr0p2 comes with an alias and search feature. The tools are located in the qu1ckdr0p2-tools...
navgix
navgix navgix es una herramienta en golang multihebra que verificará vulnerabilidades de alias traversal en nginx Técnicas Actualmente, navgix soporta 2 técnicas para encontrar directorios vulnerables o alias de ubicación. Estas son las siguientes: Heurística navgix realizará una solicitud GET...
navgix
navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...
mad-metasploit
Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...
