108 matches found
Bulk_403_Bypass
Contournement 403 en masse Ceci est un script Bash qui effectue un contournement de 403 en masse en ajoutant un en‑tête personnalisé aux requêtes HTTP. Il peut être utile pour tester si un site web est vulnérable aux techniques de contournement 403. Utilisation Pour utiliser le script, passez une...
CVE-2024-4577
Outil d'exploitation le plus rapide pour CVE-2024-4577 Description : Exécution de code à distance PHP CGI L'outil d'exploitation CVE-2024-4577 exploit.py est un script Python conçu pour exploiter la vulnérabilité spécifique des serveurs web CVE-2024-4577. En fonction du contenu de la réponse, il...
-CVE-2024-6095
Améliorations clés : 1. Obfuscation par chaîne aléatoire : Introduction de la génération de chaînes aléatoires pour obscurcir les chemins, rendant la détection plus difficile. 2. Payloads avancés : Ajout de payloads plus sophistiqués avec différentes techniques d'obfuscation pour contourner les...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
dalfox
Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...
domdig
DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...
CVE-2026-50192
Kerberos Agent (open-source video surveillance agent) prior to v3.6.26 leaks the Hub private key (X-Kerberos-Hub-PrivateKey) to a cross-host redirect target. The UploadKerberosHub function in machinery/src/cloud/kerberos_hub.go uses a bare &http.Client{} without a CheckRedirect policy. Go's net/h...
[SECURITY] Fedora 43 Update: nginx-mod-fancyindex-0.6.0-8.fc43
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
[SECURITY] Fedora 44 Update: nginx-mod-fancyindex-0.6.0-8.fc44
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
GHSA-89GH-3PGC-V5H2 n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
Impact Custom HTTP headers configured in credentials for certain LLM sub-nodes including OpenAI, Anthropic, and Lemonade are masked in the n8n UI but are written in plaintext into execution data during workflow runs. Any authenticated user with access to the execution data for an affected workflo...
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
Impact Custom HTTP headers configured in credentials for certain LLM sub-nodes including OpenAI, Anthropic, and Lemonade are masked in the n8n UI but are written in plaintext into execution data during workflow runs. Any authenticated user with access to the execution data for an affected workflo...
CVE-2026-54171
Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial...
PT-2026-55464
Name of the Vulnerable Software and Affected Versions kerberos-io/agent versions prior to 3.6.26 Description An issue exists in the Kerberos Hub upload path where the agent sends credentials in the custom X-Kerberos-Hub-PrivateKey and X-Kerberos-Hub-PublicKey request headers to the...
[SECURITY] Fedora 44 Update: nginx-mod-fancyindex-0.6.0-6.fc44
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
[SECURITY] Fedora 43 Update: nginx-mod-fancyindex-0.6.0-6.fc43
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
BIT-GRAFANA-2026-10601 Path traversal in the Tempo and Loki data source plugins
A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trigger administrative actions on the...
NPM: OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
NPM: OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin vulnerability discovered by ? in WordPress Npm openclaw versions 2026.5.12...
OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
Summary OpenClaw supports remote MCP Streamable HTTP servers with operator-configured custom headers. In affected releases, those headers could be forwarded when the MCP endpoint responded with a cross-origin redirect. This issue is limited to configured MCP Streamable HTTP servers that use custo...
GHSA-RJXQ-QQHF-8HWH OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
Summary OpenClaw supports remote MCP Streamable HTTP servers with operator-configured custom headers. In affected releases, those headers could be forwarded when the MCP endpoint responded with a cross-origin redirect. This issue is limited to configured MCP Streamable HTTP servers that use custo...
