4564 matches found
PoC-CVE-2000-0649
PoC-CVE-2000-0649 Небольшой инструмент для создания PoC для CVE-2000-0649. Использование Этот скрипт проверяет, уязвим ли сервер для CVE-2000-0649. Имейте в виду, что нужно экспериментировать с HTTP, HTTPS и различными путями. По моему опыту, раскрытие данных чаще всего происходит при подключении...
CVE-2024-40324
CVE-2024-40324 Описание Уязвимость внедрения CRLF в E-Staff v5.1 позволяет злоумышленникам вставлять символы возврата каретки CR и перевода строки LF в поля ввода, что приводит к разделению HTTP-ответов и манипуляции с заголовками. Тип уязвимости CRLF Производитель продукта E-Staff Затронутая...
CVE-2017-1000486
CVE-2017-1000486 Exploit d'exécution de code à distance pour PrimeFaces 5.x - Injection EL CVE-2017-1000486 Il s'agit essentiellement du même exploit réalisé par Mogwailabs, mais modifié pour fonctionner dans des environnements fermés sans accès à Internet ou avec un trafic sortant bloqué par le...
CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...
httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi
A flaw was found in the modproxyuwsgi module of Apache HTTP Server. This issue allows HTTP response smuggling when the server processes a crafted uWSGI response containing a Transfer-Encoding header. A remote attacker can exploit this vulnerability to desynchronize HTTP communications, potentiall...
pathprober
pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...
CVE-2026-63718
A flaw was found in the modproxyuwsgi module of Apache HTTP Server. This issue allows HTTP response smuggling when the server processes a crafted uWSGI response containing a Transfer-Encoding header. A remote attacker can exploit this vulnerability to desynchronize HTTP communications, potentiall...
Linux Distros Unpatched Vulnerability : CVE-2026-56449
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0...
openSUSE 16 Security Update : sccache (openSUSE-SU-2026:21982-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21982-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541: bytes: integer...
DEBIAN-CVE-2026-56449
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
CVE-2026-56449
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
CVE-2026-56449 Apache HTTP Server: mod_proxy_html: crash in dump_content
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
EUVD-2026-90895
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
CVE-2026-56449
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
CVE-2023-3519
CVE-2023-3519 Сканер NetScaler Citrix ADC CVE-2023-3519 Простой сканер для поиска netscalers и проверки последней даты изменения в заголовке HTTP-ответа этот проект является сканером, созданным мной на C с использованием исходного кода mrr3b00t на PowerShell...
ibm-qradar-ajp_smuggling_CVE-2022-26377_poc
CVE-2022-26377 Proof of Concept, разработанный командой @watchTowr для эксплуатации уязвимости AJP Smuggling с целью отравления очереди HTTP-ответов экземпляра IBM QRadar с помощью сохранённого перенаправления. Следите за исследовательской командой watchTowr Labs https://labs.watchtowr.com/...
CVE-2024-46982-Reproduction
Начало работы 1. Установите Node.js LTS 2. npm install 3. npm run build 4. npm run start Эксплуатация 1: Хранимый XSS через отравление кэша 1. Отправьте следующий HTTP-запрос вредоносный запрос с помощью любого HTTP-клиента. GET /poc?nextDataReq=1 HTTP/1.1 Host: localhost:3000 User-Agent:...
Rocky Linux 8 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_32992)
The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202632992 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origin...
AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1745053071)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745053071 advisory. - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant t...
Rocky Linux 10.2 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_28000)
The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628000 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-orig...