CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Aviso de exención de responsabilidad: Este script se proporciona 'tal cual' y exclusivamente con fines educativos. Se recomienda encarecidamente a los usuarios que actúen con cautela y lo utilicen dentro de los límites de las consideraciones legales y éticas...

wfuzz

Wfuzz - Webファザー Wfuzzは、Webアプリケーションの評価作業を容易にするために作成されました。その基本概念は単純で、FUZZキーワードへの参照を、指定されたペイロードの値で置き換えるというものです。 Wfuzzにおけるペイロードはデータのソースです。 このシンプルな概念により、HTTPリクエストの任意のフィールドに任意の入力を注入でき、パラメータ、認証、フォーム、ディレクトリ/ファイル、ヘッダーなど、さまざまなWebアプリケーションコンポーネントに対して複雑なWebセキュリティ攻撃を実行できます。 Wfuzzは単なるWebコンテンツスキャナではありません：...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

Multimodal-web-attack-Dataset

MWAD: Un conjunto de datos multimodal de ataques web para la detección de inyección SQL basada en IA Descripción general El conjunto de datos multimodal de ataques web MWAD es un novedoso conjunto de datos etiquetado de ciberseguridad desarrollado como parte de la investigación del autor en...

http_bridge

Http Bridge Motivación Escribí este programa como una prueba de concepto para probar la idea de poder enviar paquetes de flujo TCP a través de solicitudes HTTP simples como PUT, PATCH, POST, GET, sin usar un método de proxy como CONNECT. También como ejercicio de práctica para entrenar mi novata...

Bulk_403_Bypass

批量403绕过 这是一个Bash脚本，通过向HTTP请求添加自定义标头来实现批量403绕过。可用于测试网站是否存在403绕过漏洞。 用法 要使用该脚本，将URL列表作为命令行参数传递： ./403bypass.sh urls.txt 许可证 本项目采用MIT许可证 - 详见 许可证...

requests-racer

Requests-Racer Requests-Racer es una pequeña librería de Python que le permite utilizar la librería Requests para enviar múltiples solicitudes que serán procesadas por sus servidores de destino aproximadamente al mismo tiempo, incluso si las solicitudes tienen destinos diferentes o payloads de...

CVE-2021-27905

CVE-2021-27905 No.| Título ---|--- 1| Resumen 2| Causa raíz 3| Prueba de concepto 4| Mitigación 8.8.2+ 5| Referencia Para fines educativos y de investigación únicamente. No utilices este código en sistemas que no poseas o para los que no tengas permiso explícito de prueba. No soy responsable de...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Exploit RCE Pre-Auth de Oracle E-Business Suite Una vulnerabilidad crítica de Ejecución Remota de Código RCE sin autenticación previa en Oracle E-Business Suite versiones 12.2.3–12.2.14 permite a los atacantes obtener control total sobre servidores vulnerables mediante solicitude...

sricam-gsoap2.8-dos-exploit

sricam-gsoap2.8-dos-exploit Prueba de concepto del exploit DoS de Sricam gSOAP2.8 Código de prueba de concepto: SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 Gracias al Equipo de Asignación de CVE por su ayuda para estructurar lo siguiente: Descripción Las cámaras I...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidad Crítica de Omisión de Autenticación 🧾 Resumen 🔥 Una vulnerabilidad de severidad máxima 10.0 que permite acceso remoto sin autenticación a sistemas middleware de Oracle. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication...

EUVD-2026-90684

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_67308)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667308 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 10.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_67314)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667314 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_67283)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667283 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_66542)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1778888948)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778888948 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive ...

PT-2026-103982

Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...

CentOS Linux 8.5 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.5:CLSA-2026:1779893017)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779893017 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...