Lucene search
+L

25 matches found

Kitploit
Kitploit
added 2026/08/25 9:24 p.m.2 views

param-miner

param-miner تحدد هذه الإضافة المعلمات المخفية غير المرتبطة. وهي مفيدة بشكل خاص لاكتشاف ثغرات تسمم ذاكرة التخزين المؤقت للويب. تجمع بين منطق المقارنة المتقدم من Backslash Powered Scanner وتقنية البحث الثنائي لتخمين ما يصل إلى 65,000 اسم معلمة لكل طلب. تأتي أسماء المعلمات من قائمة كلمات مدمجة بعناي...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 6:29 p.m.2 views

x8-Burp

لم يعد هذا التطبيق مدعومًا تساعد هذه الأداة في العثور على المعاملات المخفية التي قد تكون عرضة للخطر أو قد تكشف عن وظائف مثيرة للاهتمام تغفل عنها الأدوات الأخرى. يتم تحقيق دقة أكبر بفضل المقارنة سطرًا بسطر بين الصفحات، ومقارنة رمز الاستجابة والانعكاسات. المميزات تحديد طلبات متعددة من علامة التبويب...

5.6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/25 6:10 a.m.2 views

x8

x8 مجموعة اكتشاف المعاملات المخفية مكتوبة بلغة Rust. تساعد الأداة في تحديد المعاملات المخفية التي قد تكون عرضة للخطر أو تكشف عن وظائف مثيرة للاهتمام التي قد يفوتها مختبرون آخرون. يتم تحقيق الدقة العالية من خلال المقارنة سطرًا بسطر للصفحات، ومقارنة رموز الاستجابة، والانعكاسات. التوثيق يمكن الوصول...

5.3AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

ParamFinder

ParamFinder Обнаруживайте скрытые параметры прямо из Caido! Установка Через Community Store рекомендуется 1. В вашем Caido перейдите на страницу Plugins 2. Перейдите в Community Store 3. Найдите ParamFinder 4. Нажмите Install 5. Готово! 🎉 Установка вручную 1. Перейдите на страницу Releases 2...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/21 4:03 a.m.2 views

parameth

parameth Cet outil peut être utilisé pour découvrir par force brute les paramètres GET et POST Souvent, lorsque vous explorez un répertoire à la recherche de fichiers courants, vous pouvez identifier des scripts par exemple test.php qui semblent nécessiter qu'un paramètre inconnu leur soit...

5.3AI score
SaveExploits0
PyPA
PyPA
added 2026/07/07 11:45 a.m.17 views

OpenStack Heat information leak vulnerability

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS6.7AI score0.00709EPSS
SaveExploits1References8Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/05 7:44 p.m.18 views

CVE-2026-39825

A flaw was found in the net/http/httputil package, specifically within the ReverseProxy component. This vulnerability allows the ReverseProxy to forward query parameters that are not visible to Rewrite functions. This occurs because the ReverseProxy does not correctly consider the url.ParseQuery...

6.5CVSS6.7AI score0.0039EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/06/05 7:13 p.m.14 views

CVE-2026-40569

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a mass assignment vulnerability in the mailbox connection settings endpoints of FreeScout connectionIncomingSave at app/Http/Controllers/MailboxesController.php:468 and connectionOutgoingSave at line 398...

9CVSS5.6AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/11 5:44 a.m.7 views

BIT-GOLANG-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.0039EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/09 2:43 a.m.17 views

SUSE CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.0039EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
added 2026/05/07 8:16 p.m.15 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.0039EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2026/05/07 7:41 p.m.28 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS5.8AI score0.0039EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/25 12:00 a.m.23 views

PT-2026-38566

Name of the Vulnerable Software and Affected Versions ReverseProxy affected versions not specified Description ReverseProxy can forward queries containing parameters that are not visible to Rewrite functions. When utilizing a Rewrite function or a Director function that parses query parameters,...

9.8CVSS5.8AI score0.0039EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2023-2428

Malicious code in bioql PyPI...

7.4CVSS6.2AI score0.00709EPSS
SaveExploits1References6
Packet Storm News
Packet Storm News
added 2025/05/08 12:00 a.m.7 views

Invariant-Based Cryptography

We propose a new symmetric cryptographic scheme based on functional invariants defined over discrete oscillatory functions with hidden parameters. The scheme encodes a secret integer through a four-point algebraic identity preserved under controlled parameterization. Security arises not from...

7AI score
SaveExploits0
OSV
OSV
added 2023/09/24 1:15 a.m.2 views

DEBIAN-CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

5CVSS6.1AI score0.00709EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/24 1:15 a.m.32 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS7.2AI score0.00709EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/24 1:15 a.m.6 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS5.9AI score0.00709EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/09/24 12:08 a.m.55 views

CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS7.3AI score0.00709EPSS
SaveExploits1References4
OSV
OSV
added 2023/08/16 12:17 p.m.14 views

USN-6293-1 heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

7.4CVSS5.8AI score0.00709EPSS
SaveExploits1References2
Rows per page
Query Builder