CVE-2023-46805

Escáner CVE-2023-46805 Escáner CVE-2023-46805 para posibles dispositivos Ivanti Connect Secure vulnerables por país utilizando Shodan. Versión del script: 1.3 Actualizado con la reciente publicación de blog hecha por Assetnote ⚠️ Este script tiene fines defensivos y debe ser utilizado por...

Ivanti-Connect-Around-Scan

Comprobador de Vulnerabilidad Ivanti Connect Around Comprobador de Vulnerabilidad Ivanti Connect Around Resumen Características Tipos de Comprobaciones WEB ACCESS SYSTEM INFO BYPASS DETECTED Explicación de los Tipos de Estado Primeros Pasos Requisitos Uso Argumentos Especificación del Objetivo...

ivanti_shell

Explotación de CVE-2024-21887 con Shell Inversa de Ngrok Este repositorio proporciona un script de Python diseñado para demostrar la explotación de la vulnerabilidad CVE-2024-21887 en las pasarelas Ivanti Connect Secure. Utiliza Ngrok para establecer una shell inversa con fines educativos y de...

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 Arbitrary-file-read 🤵🏻 Versiones afectadas: Jenkins 2.441 y anteriores. Jenkins LTS 2.426.2 y anteriores. Un script realizado en python para atumatizar la vulnerabilidad CVE-2024-23897 🤖 🛠️ Este código Python presenta un escáner para una vulnerabilidad específica CVE-2024-23897 en...

CVE-2025-11988

1 Extraer el nonce público de cryptoajax UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' PAGEURL='http://localhost/wordpress//' NONCE=$curl -s "$PAGEURL" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s' Fallback...

MAL-2026-17342 Malicious code in @bellaxchuu/belbails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Malicious code in kiyoramarkets (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

-Educational-PoC-CVE-2026-23520

CVE-2026-23520: Model Context Protocol MCP Connect RCE - PoC Educativo - Arcane DESCARGO DE RESPONSABILIDAD: Este repositorio y los scripts que contiene son estrictamente para fines educativos y académicos. La información aquí proporcionada está destinada a ayudar a investigadores de seguridad,...

iSpy 7.2.2.0 - Authentication Bypass

iSpy 7.2.2.0 contains an authentication bypass vulnerability. An attacker can craft a URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-29775 info: name: iSpy 7.2.2.0 - Authentication Bypass author: arafatansari severity: critical...

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

PT-2026-108315

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An HTTP server handler improperly continues to read and serve requests from a connection after sending a 2xx response to an HTTP/1 CONNECT request without...

PT-2026-108309

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description When http.Transport sends an HTTP/1 CONNECT request containing a non-empty Request.Body, the body is written directly to the connection without framing following the request headers. If the server...

DEBIAN-CVE-2026-107230

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14, connection-pool partitioning still omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. Logins...

CVE-2026-107285 AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, a proxied ws request is carried through CONNECT, but NettyRequestFactory.newNettyRequest and requestUri decide whether to attach proxy...

CVE-2026-107285 AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, a proxied ws request is carried through CONNECT, but NettyRequestFactory.newNettyRequest and requestUri decide whether to attach proxy...

CVE-2026-107285

The AsyncHttpClient (AHC) library, used by Java applications, contains a vulnerability in versions prior to 3.0.12 and 2.16.1 . The root cause lies in how NettyRequestFactory.newNettyRequest and requestUri determine whether to attach proxy authentication; because ws is not marked as secure, tunne...

EUVD-2026-94637

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the client infers that an HTTP proxy tunnel exists from the last request method rather than the CONNECT result. After a pro...

CVE-2026-107232

The AsyncHttpClient (AHC) library for Java applications is vulnerable to cleartext credential transmission in versions prior to 3.0.12 (3.x) and 2.16.1 (2.x) . The root cause is that the client incorrectly infers an active HTTP proxy tunnel based on the last request method rather than the CONNECT...

CVE-2026-107232 AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the client infers that an HTTP proxy tunnel exists from the last request method rather than the CONNECT result. After a pro...