PoC

PoC разные PoC — интернет небезопасных вещей Определённо стоит почитать про эти паршивые небезопасные вещи: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 Вся заслуга принадлежит WatchfulIP https://watchfulip.github.io/...

super-tart-vphone-writeup

Construindo um iPhone virtual usando o componente VPHONE600AP do firmware PCC lançado recentemente Agradecimentos Especiais / Reconhecimentos dlevi309 Forneceu ideias para interação por toque no iPhone virtual khanhduytran0, 34306, asdfugil, verygenericname Forneceu outras ideias para construir o...

metarget

中文 | English 1 Einführung Metarget = meta- + target, ein Framework zur automatischen Erstellung verwundbarer Infrastrukturen, das die schnelle und automatische Bereitstellung einfacher oder komplexer verwundbarer Cloud-Native-Ziele ermöglicht. 1.1 Warum Metarget? Bei Sicherheitsforschungen stelle...

KubeArmor

KubeArmor è un sistema di enforcement della sicurezza runtime cloud-native che limita il comportamento come l'esecuzione di processi, l'accesso ai file e le operazioni di rete di pod, container e nodi VM a livello di sistema. KubeArmor sfrutta moduli di sicurezza Linux LSM come AppArmor, SELinux ...

CVE-2026-64849.yaml

id: CVE-2026-64849 info: name: MLflow Webhook SSRF – Nicht authentifizierter Vollzugriff über Redirect-Bypass author: DhiyaneshDk severity: critical description: | MLflow 3.15.0 enthält eine Schwachstelle in Bezug auf die Offenlegung von Informationen, die durch eine unsachgemäße Validierung von...

CVE-2026-55245

Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17 , the isPublicIP function in core/providers/utils/fetch.go (reached via FetchAndEncodeURL for Bedrock and Vertex image/document URLs) incorrectly classifies CGNAT (100.64.0.0/10) , IPv6 6to4 (2002::/16) ,...

CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata

CVE-2026-3333 – DNS Rebinding per rubare i metadati cloud Codice del programma server attaccante Python + app vulnerabile root@kitploit: !/usr/bin/env python3 dnsrebindingserver.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254 import socket, threading, time This...

CVE-2026-82285

BISHENG (by dataelement ) through version 2.6.0-fix2 is affected by an unauthenticated Server-Side Request Forgery (SSRF) in the POST /api/v1/workflow/report/callback endpoint. The endpoint lacks authentication and applies no URL scheme restrictions or host filtering , allowing unauthenticated at...

CVE-2026-82285 BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

CVE-2026-33340

CVE-2026-33340: SSRF in lollms-webui Panoramica Campo| Dettaglio ---|--- CVE ID| CVE-2026-33340 Vulnerabilità| Server-Side Request Forgery SSRF Prodotto interessato| ParisNeo/lollms-webui LoLLMs WEBUI Gravità| Critica — CVSS 9.1 Vettore CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE|...

CVE-2026-40175

🚨 CVE-2026-40175 - Kritische Schwachstelle in Axios Prototype-Pollution-Gadget → Remote-Code-Ausführung & Cloud-Kompromittierung 📢 Überblick Axios — einer der beliebtesten HTTP-Clients für JavaScript Browser & Node.js — enthält eine kritische Schwachstelle vor Version 1.15.0. Eine bestimmte...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCEriproduzione della vulnerabilità È necessario disporre di un ambiente Docker Avvio dell'ambiente vulnerabile - Metodo 1 root@kitploit: git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh Avvio...

CVE-2022-22947

CVE-2022-22947 PoC per CVE-2022-22947 python CVE-202222947POC.py http://targetip:port/ Riferimenti a PoC e articoli di diversi esperti 1.https://github.com/chaosec2021/CVE-2022-22947-POC 2.https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/...

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE Introduzione a CVE-2022-22947 root@kitploit: Gravità: Alta Stato POC/EXP: Pubblico ID CNVD: CNNVD-2022-16402 Versioni interessate: Spring Cloud GateWay 3.1.0 Spring Cloud GateWay =3.0.0，=3.0.6 Spring Cloud GateWay 3.0.0 Descrizione della vulnerabilità...

CVE-2026-82246

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL Espressione Iniezione Comando Exploit Use：python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" Result： Aggiunta della route con espressione SpEL dannosa riuscita! Aggiornamento delle route riuscito! Risultato dell'attacco ottenuto con successo:...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Introdução A vulnerabilidade de execução remota de código do Spring Cloud Gateway CVE-2022-22947 ocorre no endpoint Actuator da aplicação Spring Cloud Gateway, que, quando ativado, exposto e inseguro, é suscetível a injeção de código. Um atacante pode explorar essa...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC Minimalbeispiel zur Reproduktion der Remote-Code-Ausführung CVE-2022-22963 in org.springframework.cloud:spring-cloud-function-core. Exploit Server starten root@kitploit: mvn spring-boot:run Anfrage stellen root@kitploit: curl -X POST -H...

EUVD-2026-67698

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...

CVE-2026-82246 Budibase Server before 3.41.3 SSRF via Query Import

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...