AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776763201)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776763201 advisory. - A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF Carriage Return Line Feed Injection, occurs...

Rocky Linux 9.6 [TuxCare] Security Update: mod_http2 (ALMALINUX9.6:CLSA-2026:1781259837)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781259837 advisory. - Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP...

ASUS-AiCloud-RCE

Origasus origasus.go ile derlenen, ASUS AiCloud / AsusWRT ile ilişkilendirilebilecek uçların yetkili güvenlik testi veya savunma analizi ör. kendi cihazınız, yazılı penetest laboratuvarı kapsamında incelenmesi için yazılmış bir Go programıdır. Önemli: Bu tür yazılımların yetkisiz sistemlere karşı...

CVE-2025-49132_poc

CVE-2025-49132 PoC Mejorado Esta es una versión mejorada del exploit de prueba de concepto CVE-2025-49132. Información del CVE ID de CVE : CVE-2025-49132 Referencia NVD : https://nvd.nist.gov/vuln/detail/cve-2025-49132 Base de datos de Wiz :...

http-pulse_ssl_vpn.nse

RESUMEN Script NSE simple para detectar la divulgación de archivos de Pulse Secure SSL VPN mediante solicitudes de recursos HTTP especialmente manipuladas. Este exploit lee /etc/passwd como prueba de concepto. Esta vulnerabilidad afecta a 8.1R15.1, 8.2 anteriores a 8.2R12.1, 8.3 anteriores a...

CVE-2026-50522

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 cargas útiles y análisis. Peticiones HTTP request| src| user-agent| encoding| unique id| payload ---|---|---|---|---|--- 816978882| 45.63.58.216| Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36| '|...

CVE-2021-3831

Exploit PHP CVE-2021-3831 Script Resumen Este script PHP está diseñado para interactuar con un sitio web objetivo generando hashes MD5 específicos y realizando solicitudes HTTP para explotar posibles vulnerabilidades. Está destinado únicamente a fines educativos y solo debe utilizarse en entornos...

CVE-2026-52749

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2026-82375

Server-Side Request Forgery SSRF in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen destinations through legacy outbound Trackback and entry enclosure handling. The Trackback control is hidden in the standar...

EUVD-2026-88136

Server-Side Request Forgery SSRF in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen destinations through legacy outbound Trackback and entry enclosure handling. The Trackback control is hidden in the standar...

CVE-2026-82375

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache Roller 6.1.5 . An authenticated user with entry-editing rights can trigger outbound HTTP requests to attacker-chosen destinations via legacy Trackback and entry enclosure handling. The Trackback action remains reachable even if h...

CVE-2023-27163-exploit

CVE-2023-27163 — exploit SSRF de request-baskets Escribí este exploit para apuntar a CVE-2023-27163 , una vulnerabilidad de Server-Side Request Forgery SSRF encontrada en request-baskets versiones ≤ 1.2.1. La falla se encuentra en el endpoint /api/baskets/name, donde el parámetro forwardurl permi...

CVE-2026-82375: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen destinations through legacy outbound Trackback and entry enclosure handling. The Trackback control is hidden in the standar...

CVE-2024-23334-PoC

Path Traversal PoC CVE-2024-23334 Este script es una prueba de concepto PoC para la vulnerabilidad CVE-2024-23334 relacionada con un Path Traversal. El script intenta acceder a archivos fuera del directorio raíz permitido mediante la manipulación de rutas en solicitudes HTTP. Requisitos Para...

CVE-2020-14882-14883

CVE-2020-14882&14883 Weblogic es un servidor de aplicaciones J2EE lanzado por Oracle. CVE-2020-14882 es una vulnerabilidad de acceso no autorizado a Console, con un nivel de gravedad catalogado como crítico, y una puntuación de 9.8. Por su parte, CVE-2020-14883 consiste en la ejecución de código ...

CVE-2023-44487

Ten en cuenta que el código anterior usa la biblioteca libcurl para realizar solicitudes HTTP. Necesitas instalar libcurl y enlazarlo al compilar el código. El código es una versión simplificada, y es posible que debas ajustarlo según tus requisitos exactos y el comportamiento específico del ataq...

CVE-2024-7954POC

CVE-2024-7954POC El plugin porteplume utilizado en las versiones de SPIP anteriores a 4.30-alpha2, 4.2.13 y 4.1.16 presenta una vulnerabilidad de ejecución de código arbitrario. Un atacante remoto no autenticado puede ejecutar código PHP arbitrario con los privilegios de un usuario de SPIP median...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script para Nmap NSE Una limitación inadecuada de una ruta de acceso a un directorio restringido "Path Traversal" en Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.3 a 5.6.7 en el portal web SSL VPN permite a un atacante no autenticado descargar archivos del sistema...

BIT-GITLAB-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

PT-2026-98982

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...