Lucene search
+L

292 matches found

Kitploit
Kitploit
•added 2026/09/25 1:19 a.m.•10 views

CVE-2020-14882

CVE-2020–14882 RCE por bypass no autorizado en Weblogic Bypass del parche con CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; lista root@kitploit: %252E%252E %2E%2E .. %3E %3C ; minúsculas root@kitploit: "%252E%252E%252F".lowe...

10CVSS8.9AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 4:52 a.m.•10 views

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC 一个用于CVE-2024-32002的POC,演示远程代码执行(RCE)。 相关子模块仓库见cve-2024-32002-poc-rce。 此仓库包含的内容 一个具有任意名称的符号链接,链接到 .git 目录。 一个定义恶意子模块的 .gitmodules 文件。 如何重建此仓库 此仓库是在Linux(具体来说是WSL2)中创建的。这很重要,恶意仓库只能在区分大小写的文件系统上创建。 1. 创建一个全小写字符的符号链接 root@kitploit: ln -s .git submodule 注意: 符号链接应指向 .git...

9CVSS8.2AI score0.29234EPSS
SaveExploits32References2
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•12 views

Gotenberg <= 8.30.1 - Server Side Request Forgery

Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...

7.8CVSS8AI score0.02115EPSS
SaveExploits1References3
OSV
OSV
•added 2026/09/23 5:58 p.m.•3 views

CVE-2026-92700 Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variation

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go, fileHidden uses case-sensitive filepath.Match checks, so case variants can bypass hide rules on case-insensitive filesystems or when mixed-case paths...

6.3CVSS5.7AI score0.00491EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/22 8:49 a.m.•13 views

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – Bypass del controlador de admisión de Kubernetes mediante sensibilidad a mayúsculas y minúsculas Código del programa webhook de admisión en Python + exploit root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flas...

6.5CVSS7AI score0.00393EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/21 5:53 p.m.•10 views

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Laboratorio Práctico de Explotación para Apache Camel 🔍 Resumen CVE-2025-27636 es una vulnerabilidad crítica de Ejecución Remota de Código RCE en Apache Camel , específicamente en el componente camel-exec. Surge de un problema sutil pero peligroso: DefaultHeaderFilterStrategy...

7.2AI score0.96922EPSS
SaveExploits4
CVE
CVE
•added 2026/09/21 4:39 p.m.•16 views

CVE-2026-77560

The Tinyauth authentication and authorization server (versions

8.1CVSS5.8AI score0.00612EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/21 4:39 p.m.•31 views

CVE-2026-77560 Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for

Tinyauth is an authentication and authorization server. Prior to 5.1.2, Tinyauth compares forwarded hostnames case-sensitively while reverse proxies route equivalent hostnames case-insensitively, allowing an authenticated low-privilege user to bypass per-app access controls with a differently cas...

8.1CVSS0.00612EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/21 4:39 p.m.•4 views

CVE-2026-77560 Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for

Tinyauth is an authentication and authorization server. Prior to 5.1.2, Tinyauth compares forwarded hostnames case-sensitively while reverse proxies route equivalent hostnames case-insensitively, allowing an authenticated low-privilege user to bypass per-app access controls with a differently cas...

8.1CVSS5.8AI score
SaveExploits0References8
NVD
NVD
•added 2026/09/21 3:17 p.m.•6 views

CVE-2026-52740

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

5.3CVSS0.00427EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/21 2:59 p.m.•36 views

CVE-2026-52740 GoCD is vulnerable to pipeline template view API authorization bypass

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

5.3CVSS0.00427EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/21 2:59 p.m.•7 views

CVE-2026-52740 GoCD is vulnerable to pipeline template view API authorization bypass

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/21 2:59 p.m.•5 views

CVE-2026-52740 GoCD is vulnerable to pipeline template view API authorization bypass

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

5.3CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/21 2:59 p.m.•5 views

EUVD-2026-83951

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/21 8:14 a.m.•7 views

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW 一个针对 CVE-2024-32002 的 POC,演示了对 .git 目录的任意写入。 请参阅相关的子模块仓库:cve-2024-32002-submodule-aw 本仓库包含的内容 一个指向 .git 目录的符号链接,其名称是任意的。 一个定义恶意子模块的 .gitmodules 文件。 如何重新创建此仓库 此仓库是在 Linux(具体来说是 WSL2)上创建的。这一点很重要,恶意仓库只能在大小写敏感的文件系统上创建。 1. 创建一个符号链接,全部使用小写字符 root@kitploit: ln -s .git submodule 注:...

9CVSS8.1AI score0.29234EPSS
SaveExploits32References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•0 views

CVE-2026-52740: Incorrect Authorization

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 7:54 p.m.•7 views

GHSA-9998-894R-FWVR Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Summary Ember's HTTP/1.1 header parser matches the Transfer-Encoding header value with a case-sensitive substring test hValue.contains"chunked". RFC 9112 §7 requires transfer-coding names to be compared case-insensitively. A request carrying Transfer-Encoding: Chunked capital C is therefore not...

8.7CVSS6AI score0.0048EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/15 7:15 p.m.•28 views

CVE-2026-69205 Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

8.7CVSS0.0048EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/15 7:15 p.m.•9 views

CVE-2026-69205 Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

8.7CVSS5.6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 7:15 p.m.•12 views

CVE-2026-69205 Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

8.7CVSS5.6AI score0.0048EPSS
SaveExploits0References4
Rows per page
Query Builder