1843 matches found
CVE-2019-17638-Jetty
JETTY El proyecto Jetty es un servidor HTTP 100% Java, un cliente HTTP y un contenedor de servlets de la fundación Eclipse. http://www.eclipse.org/jetty/ Jetty es de código abierto y tiene doble licencia: Apache 2.0 y Eclipse Public License 1.0. Puedes elegir cualquiera de las dos licencias al...
slinger
slinger投石器 Un Cliente HTTP para Rust diseñado para hackers. Explora la documentación » · ·...
burner-net
BurnerNet Cliente HTTP antirforense y de confianza cero. Borra secretos. Corta rastros. RCP en un tanque sigiloso. 👻 BurnerNet es un cliente HTTP antirforense en C++20. Proporciona una API fluida, similar a CPR, para aplicaciones que no pueden confiar plenamente en la máquina local: borra...
forbidden
Forbidden 绕过 4xx HTTP 响应状态码及更多。 该工具基于 Python Requests、PycURL 和 HTTP Client。 在 Kali Linux v2024.2（64 位）上测试。 仅用于教育目的。希望能有所帮助！ 未来计划： 添加 silent 选项以抑制控制台输出。 添加 no color 选项以禁用彩色控制台输出。 添加对 hop-by-hop HTTP 请求头的测试。 添加对 User-Agent HTTP 请求头的测试。 添加对 HTTP cookies 的测试。 添加对 HTTP 走私的测试。 添加对 CRLF 的测试。 添加对 Log4j...
CVE-2026-84850
CVE-2026-84850 is an improper certificate validation vulnerability in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier . A network-positioned attacker can intercept and tamper with outbound TLS connections by presenting a spoofed ...
EUVD-2026-79188
Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...
cli
HTTPie CLI：API 时代的人性化 HTTP 客户端 HTTPie（发音为 aitch-tee-tee-pie ）是一款命令行 HTTP 客户端。它的目标是让 CLI 与 Web 服务的交互尽可能人性化。HTTPie 专为测试、调试以及通常与 API 和 HTTP 服务器交互而设计。http 与 https 命令允许创建并发送任意 HTTP 请求。它们使用简单自然的语法，并提供格式化和彩色化的输出。 !HTTPie...
Retrofit-1
Retrofit Cliente HTTP seguro en tipos para Android y Java por Square, Inc. Para más información, visite el sitio web. Descarga Descargue el último JAR u obténgalo mediante Maven: root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 o Gradle: root@kitploit: implementation...
aiohttp - Directory Traversal
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...
RustTLSX
RustTLSX 🦀 . Un cliente HTTP furtivo avanzado para Rust. Diseñado para desarrolladores conscientes de la privacidad que necesitan control total sobre su huella de red. Parece un navegador. Actúa como un navegador. Escrito en Rust. Créditos y Fundamentos Construido sobrebogdanfinn/tls-client - la...
square__retrofit_CVE-2018-1000850_2-4-0
Retrofit Cliente HTTP con seguridad de tipos para Android y Java de Square, Inc. Para más información, consulta el sitio web. Descarga Descarga el JAR más reciente u obténlo vía Maven: root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 o Gradle: root@kitploit: implementation...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-90455
This vulnerability involves a reverted update to a bundled HTTP client library within a log-processing component , reintroducing a previously vulnerable version. The root cause is that a prior patch raising the library to a fixed version was undone, restoring the vulnerable code. However, the onl...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
PT-2026-90524
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
axios: Axios: Prototype pollution allows information disclosure and request manipulation
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object...
axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NOPROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the...
golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect
A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header redirected to b.com/ will not send that header to b.com. However, the...