Lucene search
+L

3985 matches found

Kitploit
Kitploit
added 2026/09/12 6:23 a.m.6 views

CVE-2018-13257

Suplantación de cabecera de host en ticket CAS de Blackboard Learn Un módulo de autenticación dentro de Blackboard Learn es susceptible a la suplantación de la cabecera de host HTTP durante la validación del ticket de servicio del Servicio Central de Autenticación CAS. Un ticket de servicio CAS...

6.1CVSS6.2AI score0.0121EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 5:44 a.m.11 views

RCE

CVE-2022-31814 Bug de WebApp root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

9.8CVSS8.2AI score0.91881EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 3:58 a.m.6 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Prueba de concepto para CVE-2025-25198, un problema de envenenamiento de cabecera Host que afecta los flujos de restablecimiento de contraseña de Mailcow. El script inicia un listener HTTPS local en el puerto 443, obtiene un token CSRF válido automáticamente, envía la secuencia...

8.8CVSS7.2AI score0.01121EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 2:13 a.m.5 views

CVE-2021-27404

Inyección de Cabecera de Host Autenticada - Módem de Fibra Askey Internet Fabricante: Askey Versión de Software: BRSVg11.11RTFTEF001V6.54V014 Modelo: RTF8115VW Cabecera Vulnerable: Host No probado en otro modelo/versión. Impacto: Un atacante podría aprovechar esta vulnerabilidad para redirigir al...

6.1CVSS6.3AI score0.0087EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 9:35 p.m.6 views

XSSTracer

XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer es un pequeño script en Python que verifica servidores web remotos en busca de Clickjacking, Cross-Frame Scripting, Cross-Site Tracing e Inyección de Cabecera de Host. root@kitploit: Usage: ./xsstracer...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:25 p.m.6 views

CVE-2026-48710

CVE-2026-48710 Principle: Starlette is an open-source, lightweight Python ASGI framework. The root cause is that when processing URL data structures, Starlette trusts the host sent by the client and directly concatenates it into the url variable for subsequent authentication handling. The raw URL...

6.5CVSS6.5AI score0.36257EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 8:38 p.m.6 views

CVE-2022-22972

CVE-2022-22972 POC para CVE-2022-22972 que afecta a VMware Workspace ONE, vIDM y vRealize Automation 7.6. Análisis técnico Un análisis técnico de la causa raíz de la vulnerabilidad se puede encontrar en nuestro blog:...

9.8CVSS8.3AI score0.56305EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 8:34 p.m.6 views

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Antecedentes pfBlockerNG es la próxima generación de pfBlocker con las siguientes características: 1. Administrar fuentes de listas IPv4/v6 en formatos 'Denegar, Permitir o Coincidir'. 2. Base de datos GeoIP de MaxMind Inc. versión gratuita GeoLite2. 3. Mejoras de...

9.8CVSS8.1AI score0.17107EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 7:05 p.m.4 views

CVE-2026-34835-Black-box-Analysis

Este repositorio proporciona un análisis de seguridad de caja negra de CVE-2026-34835 desde la perspectiva de un probador de penetración externo. El objetivo no es realizar ingeniería inversa de la vulnerabilidad, sino documentar cómo un evaluador de seguridad puede identificar, validar y evaluar...

6.5CVSS6.1AI score0.00192EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 6:47 p.m.105 views

urlbuster

root@kitploit: ██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:33 p.m.15 views

cloudfrunt

CloudFrunt CloudFrunt es una herramienta para identificar dominios de CloudFront mal configurados. Antecedentes CloudFront es una Red de Entrega de Contenido CDN proporcionada por Amazon Web Services AWS. Los usuarios de CloudFront crean "distribuciones" que sirven contenido desde fuentes...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:20 p.m.67 views

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:03 p.m.9 views

CVE-2022-24181

CVE-2022-24181 y CVE-2022-26616. probablemente son iguales Open-journal-system-Vulnerabilidad XSS mediante inyección de Host Header y robo del token de restablecimiento de contraseña de otro usuario Pasos para reproducir: 1. Ir a este sitio: https://who's-using-ojs-software.com 2. Capturar esta...

6.1CVSS6.3AI score0.0608EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2026/09/11 2:33 p.m.5 views

CVE-2026-88877

A flaw was found in Traefik's Kubernetes ingress-nginx provider. A remote attacker, by sending a specially crafted request with a malformed Host header e.g., containing a non-numeric port, can bypass security middlewares, including authentication and IP allowlisting. This leads to unauthorized...

9.8CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 11:18 a.m.6 views

zaphoster

zaphoster Corregir el forzado de la cabecera Host en zaproxy Agrega el script ZAP/zap-hoster.py a la pestaña httpsender y ejecuta app.py root@kitploit: $ sudo pip3 install flask requests $ python3 app.py root@kitploit: GET https://knassar702.github.io/ HTTP/1.1 Host: knassar702.github.io...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 11:10 a.m.6 views

Mini_httpd-CVE-2018-18778

minihttpd Vulnerabilidad de lectura de archivos arbitrarios CVE-2018-18778 Minihttpd es un servidor HTTP en miniatura que puede mantener un cierto nivel de rendimiento aproximadamente el 90% de Apache mientras ocupa pocos recursos del sistema, por lo que es ampliamente utilizado como servidor...

6.5CVSS7AI score0.70791EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:51 a.m.7 views

poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

5.3CVSS5.9AI score0.00443EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 8:53 a.m.2 views

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 SISQUALWFM Host Header Injection Vulnerability This repository contains information related to a host header injection vulnerability discovered in SISQUALWFM version 7.1.319.103, which allows an attacker to manipulate webpage links or redirect users to a malicious site. This...

6.1CVSS6.4AI score0.00507EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 6:29 a.m.7 views

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

6AI score
SaveExploits0
OSV
OSV
added 2026/09/11 5:57 a.m.13 views

BIT-TOMCAT-2025-66614 Apache Tomcat: Client certificate verification bypass due to virtual host mapping

Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0 through 11.0.14, from 10.1.0 through 10.1.49, from 9.0.0 through 9.0.112. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Older EOL versions...

9.1CVSS5.7AI score0.00235EPSS
SaveExploits0References2
Rows per page
Query Builder