Lucene search
+L

47 matches found

Kitploit
Kitploit
•added 2026/09/25 11:17 p.m.•16 views

url-status-checker

상태 확인기 URL 상태 확인기 v2.1 Status Checker는 하나 이상의 URL/도메인의 상태를 확인하고 HTTP 상태 코드에 따라 분류하는 Python 스크립트입니다. 버전 2.1.0 기능 단일 또는 여러 URL/도메인의 상태 확인 향상된 성능을 위한 비동기 HTTP 요청 리디렉션 추적 관련된 모든 IP 주소 추적 상태 코드를 시각적으로 구분하는 색상 코드 출력 여러 URL 확인 시 진행률 표시줄 결과를 출력 파일로 저장 접근 불가능한 URL 및 잘못된 응답에 대한 오류 처리 사용하기 쉬운 명령줄 인터페이스 설치 1...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 2:21 p.m.•6 views

Horn3t

Horn3t 🐝 - 더 나은 서브도메인 정찰 정찰 - 번개처럼 빠른 속도로 타겟 정찰 생산성 향상 - 흥미로운 외형 의 사이트에 집중하여 생산성 향상 즉시 열거 - 중요 사이트 즉시 열거 타겟을 찌르세요 Horn3t은 서브도메인을 시각적으로 탐색하는 최고의 도구입니다. 훌륭한 Sublist3r 프레임워크를 기반으로 또는 원하는 것으로 확장 가능 서브도메인을 검색하고 멋진 사진 미리보기를 생성합니다. HTTP 상태 코드로 타겟에 대한 빠른 개요를 얻고, 사용자 정의 발견 서브도메인을 추가하며, 한 번의 클릭으로 발견된 URL에...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 1:43 p.m.•148 views

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/25 8:18 a.m.•10 views

Parsero

Parseroとは? ParseroはPythonで書かれた無料のスクリプトで、WebサーバーのRobots.txtファイルを読み込み、Disallowエントリを調べます。Disallowエントリは、Webサーバー上にあるどのディレクトリやファイルがインデックスされるべきでないかを検索エンジンに伝えます。例えば、"Disallow:...

6.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/08/27 4:55 p.m.•10 views

SUSE CVE-2026-55227

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

4.3CVSS5.8AI score0.00324EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/26 8:10 p.m.•40 views

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

4.3CVSS0.00324EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/05 7:51 a.m.•73 views

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

5.3CVSS5.5AI score0.00343EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/24 5:55 p.m.•106 views

CVE-2026-42041

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses 401, 403, 500, etc., causing them to be...

8.2CVSS5.3AI score0.0081EPSS
SaveExploits1References41Affected Software1
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•23 views

Axios 授权问题漏洞

Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 have a vulnerability related to authorization. This vulnerability stems from the use of the mergeDirectKeys merging strategy in validateStatus. This strategy uses the in operator to traverse the...

6.5CVSS5.8AI score0.0081EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/03/24 7:18 p.m.•19 views

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

Summary The /api/auth/login authentication endpoint does not execute in constant time. When a non-existent username is supplied, the server returns a 401/403 response almost immediately. When a valid username is provided, the server performs a bcrypt password comparison, causing a measurable dela...

5.3CVSS5.9AI score0.00468EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-5850

Malware in sbrugna...

5.8CVSS6.1AI score0.01281EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2006-5710

Malware in sbrugna...

5CVSS6.4AI score0.02771EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-58908

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00589EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/10/02 11:23 p.m.•10 views

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

5.3CVSS7.2AI score0.00386EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/02 12:00 a.m.•1 views

CVE-2025-54291: Generation of Error Message Containing Sensitive Information

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

6.9CVSS5.8AI score0.00386EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•13 views

Malicious code in es6-http-status-codes (npm)

The package es6-http-status-codes was found to contain malicious code...

7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/04/14 10:51 a.m.•136 views

Exploit for CVE-2025-46047

CVE-2025-46047 Silverpeas -u Example...

7.2AI score0.00355EPSS
SaveExploits3
Kitploit
Kitploit
•added 2024/04/27 4:55 p.m.•66 views

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

7.2AI score
SaveExploits0References3
GithubExploit
GithubExploit
•added 2024/03/20 1:48 p.m.•922 views

Exploit for CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 Exploit PoC Overview This re...

5.3CVSS6.9AI score0.01659EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•12 views

PT-2023-31411 · Elastic · Agent +2

Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...

6.8CVSS6.5AI score0.00666EPSS
SaveExploits0References10
Rows per page
Query Builder