CVE-2024-12986

Сканер и эксплойт для CVE-2024-12986 Этот репозиторий содержит сканер и эксплойт для уязвимости CVE-2024-12986 , которая представляет собой уязвимость внедрения команд в конечной точке apmcfgupptim шлюзовых устройств DrayTek. Уязвимость позволяет атакующему выполнять произвольные команды на...

CTT-Refraction-Vortex-CVE-2026-7731-

CTT-Refraction-Vortex-CVE-2026-7731- В рамках CTT мы рассматриваем это как Временное Расхождение Синхронизации между Поставщиком Удостоверений и Поставщиком Услуг. Внедряя импульс на частоте \alpha=0.0302011, мы не обходим подпись — мы Преломляем Временное Окно, чтобы подпись подтверждалась...

CVE-2023-31446-Remote-Code-Execution

CVE-2023-31446-Remote-Code-Execution Репозиторий содержит описание CVE-2023-31446, обнаруженной командой Dodge Industrial Team для платформы Dodge OPTIFY. Идентификатор CVE: CVE-2023-31446 Производитель: Cassia Networks Продукт: прошивка Cassia Gateway Версия:...

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Summary The OpenChoreo control-plane cluster-gateway served its caller-facing management APIs on the same network listener that accepts data-plane agent connections. In the multi-cluster topology that listener is published outside the cluster, and the management APIs did not authenticate the...

CVE-2025-41243-Vulnerability-Lab

CVE-2025-41243 : Laboratoire RCE Spring Cloud Gateway Description de la vulnérabilité Spring Cloud Gateway présente une vulnérabilité d'injection d'expression SpEL. Lorsque le point de terminaison Actuator est activé, un attaquant peut exécuter du code à distance RCE. Démarrage docker-compose up ...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

CVE-2025-20393

CVE-2025-20393 📌 Aperçu CVE-2025-20393 est une vulnérabilité critique d'exécution de commande à distance RCE affectant les appliances Cisco Secure Email Gateway SEG et Cisco Secure Email and Web Manager SEWM exécutant Cisco AsyncOS. La vulnérabilité existe en raison d'une validation d'entrée...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

cve-2022-22947

Spring Cloud Gateway Actuator API SpEL Кодовая инъекция CVE-2022-22947 Сборка root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22947.git $ cd cve-2022-22947 $ docker build . -t cve-2022-22947 $ docker run -p 9000:9000 --name cve-2022-22947 cve-2022-22947 PoC отправьте следующий...

CVE-2026-3055

CVE-2026-3055 — Уязвимость безопасности Серьёзность: Н/Д CVSS: Н/Д Воздействие: Н/Д Опубликовано: 2026-03-23 Правовая информация Только для авторизованного тестирования безопасности. Корневая причина кратко Недостаточная проверка входных данных в NetScaler ADC и NetScaler Gateway при настройке в...

EUVD-2026-70247

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

CVE-2026-66786

Submariner 's certificate-based IPsec authentication mode (IPSecCertAuthMode: true) is vulnerable to ipsec.conf stanza injection via remote-supplied CableName and subnets fields in the Custom Resource Definition. Because these free-form strings are incorporated into the connection configuration w...

spring-cloud-gateway-cve-2022-22947-report

spring-cloud-gateway-cve-2022-22947-report Rapport technique sur la CVE-2022-22947 dans Spring Cloud Gateway et son exploitation via des endpoints Actuator exposés...

CVE-2026-84377 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

CVE-2026-66362

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

EUVD-2026-70139

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...

CVE-2026-66362

CVE-2026-66362 is a configuration injection vulnerability in the NGINX configuration generator component of NGINX Gateway Fabric . When NGINX Plus is configured as the data plane, user-supplied values from the AuthenticationFilter CRD (clientID, cookieName) or the clientSecret field of a referenc...

CVE-2026-66362 NGF vulnerability

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...