CVE-2026-27944

CVE-2026-27944 - Descarga y Descifrado de Copia de Seguridad No Autenticado en Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red Un exploit de prueba de concepto PoC para CVE‑2026‑27944, una...

CVE-2026-105782 Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

403Kangaroo

403Kangaroo !! This tool is still under development if you have any issues please don't hesitate to contact me via linkedin or smth 403/401 bypass tool via certain headers and values headers.txt,values.txt. When you load the extension for the first time it will open a headers.txt file and write t...

CVE-2023-45857-Demo

Demo to verify the behavior of axios vulnerability CVE-2023-45857 1. Start with dev container 2. Run npm run dev on the app container 3. Access http://app.localhost 4. Verify that XSRF-TOKEN is set in the Cookie using the browser's developer tools The value is CREDENTIALTOKEN HttpOnly is false...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

EUVD-2026-63829

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name...

foremost

FOREMOST Foremost es un programa de Linux para recuperar archivos basándose en sus cabeceras y pies. Foremost puede trabajar con archivos de imagen, como los generados por dd, Safeback, Encase, etc., o directamente sobre una unidad. Las cabeceras y los pies se especifican mediante un archivo de...

CVE-2025-23167

CVE-2025-23167 – Node.js HTTP Request Smuggling Exploit Working exploit for CVE-2025-23167, a request smuggling vulnerability affecting Node.js 20.x versions prior to v20.19.2. This bug allows improper HTTP header termination, enabling attackers to bypass proxy-based access controls. Files...

CVE-2025-29927

CVE-2025-29927 Critical - 9.1 Next.js Middleware Bypass Vulnerability Hands-On of CVE-2025-29927 vulnerability in Next.js application where the internal header x-middleware-subrequest can be used to bypass middleware authentication and restricted access. Explained Next.js use an internal header...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Análisis de bypass en middleware / RSC de Next.js El autor no asume ninguna responsabilidad por el mal uso o daños causados por esta investigación Proporcionado estrictamente con fines educativos y defensivos Descripción Este repositorio contiene un pequeño...

CVE-2019-5418

CVE-2019-5418 Caso de prueba Ejecutar : $ rails s PoC : Accept: ../../../../../../../../etc/passwd Petición 1 - GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept: diyarbakirguzelbaglardelalelorke ------ CATC...

CVE-2026-78329

CVE-2026-78329 — camel-undertow: la estrategia de filtrado de cabeceras no se aplica inyección websocket. Reproductor ejecutable de prueba de concepto para la vulnerabilidad de Apache Camel en la que UndertowEndpoint usaba por defecto como headerFilterStrategy la base HttpHeaderFilterStrategy y...

Forbidden-Buster

Forbidden Buster is a tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk. Features Probes HTTP 401 and 403...

CVE-2026-46453

Reproducción de inyección de encabezado sin prefijo camel-elasticsearch-rest-client CVE-2026-46453 Este proyecto demuestra una inyección de encabezados de mensaje / omisión de autorización en el componente camel-elasticsearch-rest-client de Apache Camel, registrada como CVE-2026-46453. El...

CVE-2026-46457

CVE-2026-46457 — Inyección de encabezados entrantes camel-nats SSRF Reproductores de prueba de concepto ejecutables para la misma vulnerabilidad de Apache Camel, uno por runtime: Runtime| Directorio| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot...

Scanner_CVE_2026-42945

Escáner para detección de instancias Nginx vulnerables al CVE-2026-42945 NGINX RIFT. Acepta IPs individuales, rangos CIDR y ASNs como entrada. Acerca de El CVE-2026-42945 afecta a todas las versiones de Nginx anteriores a la 1.30.1. La herramienta sondea HTTP y HTTPS en los puertos predeterminado...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Bypass de autenticación Explotación masiva /api/v2/cmdb/system/admin/ "ssh-public-key1": "" ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded: for="127.0.0.1...

CVE-2025-25198-PoC

CVE-2025-25198-PoC Prueba de concepto para CVE-2025-25198, un problema de envenenamiento de cabecera Host que afecta los flujos de restablecimiento de contraseña de Mailcow. El script inicia un listener HTTPS local en el puerto 443, obtiene un token CSRF válido automáticamente, envía la secuencia...

ExchangeFinder

ExchangeFinder ExchangeFinder is a simple and open-source tool that tries to find Micrsoft Exchange instance for a given domain based on the top common DNS names for Microsoft Exchange. ExchangeFinder can identify the exact version of Microsoft Exchange starting from Microsoft Exchange 4.0 to...

CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...