CVE-2026-91766

When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP. A server that can steer a redirect therefore...

CVE-2026-67421

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

EUVD-2026-87242

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

EUVD-2026-87148

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...

amt_auth_bypass_poc

Intel AMT authentication bypass example This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5689 vulnerability. It is essentialy a mitmproxy script that simply blanks an Authorization header "response" field. Example usage: root@kitploit: mitmdump -p 8080 -dd...

CVE-2021-38647

...

cisco-ios-xe-implant-detection

Cisco IOS XE implant scanning & network detection Network detection of CVE-2023-20198 exploitation and fingerprinting of post-exploitation of Cisco IOS XE devices. CVE-2023-20198 Suricata network detection The suricata/ folder contains Suricata detection rules for exploitation of CVE-2023-20198...

POC-CVE-2023-32681

POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...

inference-gateway-PoC

inference-gateway: aviso de seguridad...

cve-2026-41940-tool

🚀 CVE-2026-41940 – Herramienta de Explotación de Bypass de Autenticación en cPanel & WHM / WP Squared Una utilidad integral en Python para detectar , escanear en masa y explotar la vulnerabilidad crítica de bypass de autenticación CVE-2026-41940 en cPanel & WHM y WP Squared. La herramienta combin...

CVE-2025-31161

Escáner de omisión de autenticación CVE-2025-31161 CrushFTP Una herramienta en Python para detectar y probar la vulnerabilidad CVE-2025-31161 en servidores CrushFTP. 📖 Descripción Este script prueba la vulnerabilidad de omisión de autenticación CVE-2025-31161 en servidores CrushFTP que permite a...

CVE-2022-30114

Desbordamiento de búfer en 'cmproxy' de Fastweb FastGate CVE-2022-30114 Introducción Este script es una prueba de concepto PoC de CVE-2022-30114 y provoca un reinicio de los routers domésticos Fastweb FastGate , tanto en la versión GPON como en VDSL2. CVE-2022-30114 es un desbordamiento de búfer...

EUVD-2026-44813

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding...

cve-2025-25257

CVE-2025-25257 - Entorno de Experimentación Arquitectura de la Experimentación el entorno simula los componentes vulnerables de FortiWeb root@kitploit: Endpoint vulnerable : /api/system/fabric/config Vector de inyección : Header HTTP Authorization: Bearer Mecanismo : Concatenación SQL directa...

CVE-2026-20896

Código de la Prueba de Concepto CVE-2026-20896 Este script automatiza la explotación del fallo de lógica en la validación de rutas de la API de Gitea, permitiendo forzar al servidor a otorgar un token administrativo válido mediante un ataque de salto de directorio Directory Traversal en la cabece...

CVE-2025-25257

Probador de Vulnerabilidad CVE-2025-25257 de Fortinet FortiWeb Descripción Este script de PowerShell está diseñado únicamente para pruebas de penetración autorizadas. Prueba los dispositivos Fortinet FortiWeb para CVE-2025-25257, una vulnerabilidad de inyección SQL no autenticada en el endpoint...

CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentication bypass CVE-2025-2825 PoC This script exploits the CrushFTP authentication bypass vulnerability in versions: 10.0.0 10.8.3 11.0.0 11.3.0 How It Works CrushFTP's AWS S3-style authentication can be bypassed using: A fake but valid-looking...

CVE-2021-38647-noimages

CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647...

CrushFTP-CVE-2024-4040-illdeed

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...

cve-2021-38647

cve-2021-38647 https://github.com/corelight/CVE-2021-38647 without the bloat CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod...