Fenrir

Fenrir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Released under AGPL see LICENSE for more information Description Fenrir was created to prove that it is possible to...

JDSer-ngng

JDSer-ngng A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library. Why? This release fixes the bug in the other implementation in JDSer-ng which didn't actually allow modification of the request. Also extends it further, allowing proper use of...

Sleipnir

Sleipnir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Released under AGPL see LICENSE for more information Description Sleipnir is a small executable designed for quick...

Imperva_gzip_WAF_Bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

CVE-2023-25157

Лаборатория CVE-2023-25157 и CVE-2023-25158 Эта лаборатория использует GeoServer/PostGIS для исследования OGC Filter SQL injection в локальной среде, с чётким разделением режима оператора/настройки и режима атакующего. CVE-2023-25157: поверхность продукта GeoServer, запросы WFS/WMS попадают в...

CVE-2026-73319

CVE-2026-73319: JavaScript URI accepted as a dynamic redirect XenForo before 2.3.13 accepts a same-host javascript: URI as a dynamic redirect and later assigns it to window.location. What happens Server-side redirect validation rejects foreign hosts but does not require HTTP or HTTPS. A URL shape...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Эксплойт типа «отказ в обслуживании» для HTTPS-слушателя Sliver C2. Подбирает перебором per-session nonce кодирования PNG и доставляет «бомбу декомпрессии», которая исчерпывает память сервера. Опубликовано как GHSA-663m-7x7m-g4fw. Краткое описание Канал C2 Sliver по HTT...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Описание Отражённая межсайтовая уязвимость XSS существует в /dashboard/settings.php в Bank Management System in Web 1.0. Уязвимость возникает из-за неправильной санитизации пользовательского ввода в GET-параметре msg. Злоумышленник может создать вредоносный URL,...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 — статически слинкованная реализация на основе эксплойта Blasty, которой не нужен gcc. payload.so кодируется из payload.h и записывается на диск. Статически скомпилированный бинарник включён для удобства. Оригинальный PoC и автор...

CVE-2025-55315-detection-playground

Вот некоторые тесты, которые можно выполнить против этих сервисов, чтобы наблюдать различное поведение на маршрутах GET/POST между пропатченной и непропатченной версиями Kestrel. GET против непропатченной версии отправляет 200, и сокет остаётся открытым printf 'GET / HTTP/1.1\r\nHost:...

CVE-2025-55752

CVE-2025-55752: Уязвимость обхода пути в Apache Tomcat Среда воспроизведения на базе Docker для CVE-2025-55752 — уязвимости обхода пути в Apache Tomcat 10.1.44. Обзор CVE-2025-55752 — это уязвимость обхода пути в RewriteValve Apache Tomcat, вызванная некорректным порядком обработки: нормализация...

react2shell-cve-2025-55182

🚨 React2Shell - CVE-2025-55182 Exploitation Framework Advanced exploitation framework for CVE-2025-55182 Next.js Remote Code Execution Author: opsecramdan 📚 Table of Contents Overview Vulnerability Details Features Requirements Installation Usage Interactive Shell Output Files Impact Mitigation...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

CVE-2026-33331

CVE-2026-33331 — Stored XSS in oRPC OpenAPI Reference Plugin Proof-of-concept lab for stored XSS in orpc's OpenAPI documentation generation Purpose oRPC builds API docs pages from an OpenAPI spec. Before v1.13.9 it dumped the spec directly into a tag using JSON.stringify with no HTML encoding. An...

DEBIAN-CVE-2026-63718

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

UBUNTU-CVE-2026-63718

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origi...

apache-cve-2021-41773-lab

Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: ./apachelab.sh choose option 1 Manual exploit: curl --path-as-is...

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service

ImpactWho is impacted: - Any application using Zapros to make HTTP requests to untrusted servers - Applications that follow redirects to attacker-controlled hostsAttack vector: - A malicious HTTP server returns a response with many chained content encodings. When the client attempts to decode, it...