Lucene search
+L

632 matches found

Kitploit
Kitploit
added 2026/09/13 12:04 p.m.8 views

bbscope

bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:56 a.m.7 views

CaddySmith

CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:24 a.m.8 views

caddy

a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help...

5.8AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.182 views

Caddy 2.4.6 - Open Redirect

Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...

6.1CVSS6.7AI score0.01431EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/12 6:44 a.m.6 views

QUIC-attacks

Ataques QUIC CVE-2022-30591 Este repositorio tiene el propósito de compartir los scripts que utilizamos con fines educativos. Estos ataques fueron parte de nuestro estudio consulte aquí y fueron probados contra 6 servidores diferentes compatibles con QUIC IIS, NGINX, LiteSpeed, Cloudflare, H2O y...

7.5CVSS7.2AI score0.02954EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/11 9:34 p.m.7 views

RedCaddy

RedCaddy C2 redirector base on caddy Table of content Overview Feature Note Quick start Step by step References Overview Generate caddyfile with c2 malleable profiles Feature Block IP by GEOIP country Allow requests by header matcher User-agent & IP blacklist Support multiple redirection TeamServ...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/06 7:45 a.m.13 views

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/08/20 6:36 p.m.13 views

GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...

4.7CVSS5.7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.22 views

PT-2026-80742

Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...

4.7CVSS5.7AI score
SaveExploits0References6
Circl
Circl
added 2026/08/19 8:31 a.m.17 views

GHSA-F3QQ-49M6-RW8F

creationtimestamp| type| source ---|---|--- 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...

4.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/19 7:44 a.m.9 views

CVE-2026-45135

A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...

8.1CVSS5.9AI score0.00676EPSS
SaveExploits1References4
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.20 views

GO-2025-4180 vulnerabilities

Vulnerabilities for packages: caddy-fips, caddy...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.22 views

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step, step-ca-fips, caddy-fips, step-fips, step-issuer-fips, caddy, step-ca, step-issuer...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.21 views

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, rancher-webhook-fips, metrics-server-fips, buildkitd, up, kube-oidc-proxy, rancher-webhook, caddy, kubevela, kubernetes-fips, k3s, kubernetes...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.20 views

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step, step-ca-fips, caddy-fips, step-fips, step-issuer-fips, caddy, step-ca, step-issuer...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.21 views

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gitness, cloudflared, rclone-fips, caddy, tkn, step, step-fips, step-issuer, karma, dapr, kyverno-policy-reporter-ui-fips, sftpgo, step-ca, rclone, gogatekeeper, kyverno-policy-reporter-ui, dapr-fips, telegraf, step-ca-fips, caddy-fips, buf, tkn-fips, step-issuer-fip...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.21 views

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: q, frp, cloudflared, kubernetes-dns-node-cache, spegel, caddy-fips, buf, traefik, caddy, kubernetes-dns-node-cache-fips, eks-distro, traefik-fips, eks-distro-fips, k3s...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.24 views

GO-2025-4181 vulnerabilities

Vulnerabilities for packages: caddy-fips, caddy...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.16 views

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, step-ca-fips, frankenphp-8.3, caddy-fips, frankenphp-8.4, step-issuer-fips, caddy, frankenphp-8.5...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.18 views

GO-2024-2682 vulnerabilities

Vulnerabilities for packages: cloudflared, caddy-fips, caddy, q, k3s...

5.9AI score
SaveExploits0
Rows per page
Query Builder