2567 matches found
CVE-2026-59298
Spring Cloud Function is affected by improper filtering of HTTP headers , allowing potential header manipulation. The vulnerability spans multiple release lines: 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier . The CVSS 3.1 score is 3.1 (LOW) , reflecting a network-based attack ...
CVE-2026-21710
CVE-2026-21710 — Node.js req.headersDistinct DoS सारांश...
ipsourcebypass
Mit diesem Python-Skript können IP-Quellbeschränkungen mithilfe von HTTP-Headern umgangen werden. Funktionen 17 HTTP-Header. Multithreading. JSON-Export mit --json outputfile.json. Automatische Erkennung der erfolgreichsten Umgehungen...
struts2_cve-2017-5638
struts2cve-2017-5638 Dies ist eine Art Java-Portierung des Python-Exploits unter: https://www.exploit-db.com/exploits/41570/. Diese Software wurde ohne externe Abhängigkeiten geschrieben. HAFTUNGSAUSSCHLUSS Dieses Tool ist für Sicherheitsingenieure und AppSec-Leute für Sicherheitsbewertungen...
CVE-2014-6271
CVE-2014-6271 Shellshock Exploit in Python Un'implementazione Python pulita, efficiente e interattiva progettata per testare la vulnerabilità Shellshock CVE-2014-6271 tramite l'iniezione di variabili d'ambiente HTTP. 📝 Descrizione Shellshock CVE-2014-6271 è una vulnerabilità di sicurezza critica...
L4sh
Log4Shell RCE Exploit L'exploit è completamente indipendente e non richiede alcun binario di terze parti. L'exploit inietta il payload in tutte le possibili intestazioni HTTP registrate nei log, come X-Forwarding , Server-IP , User-Agent Utilizzo root@kitploit: python main.py -i lhost -u...
waf-bypass
WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...
h2t
h2t - Strumento di Hardening HTTP Descrizione h2t è uno strumento semplice per aiutare i sysadmin a rafforzare la sicurezza dei loro siti web. Fino ad ora h2t controlla le intestazioni del sito web e raccomanda come migliorarle. Dipendenze Python 3 colorama requests Installazione root@kitploit: $...
headerpwn
headerpwn A fuzzer for analyzing how servers respond to different HTTP headers. 🏗️ Install ⛏️ Usage 📡 Proxying HTTP Requests Install To install headerpwn, run the following command: root@kitploit: go install github.com/devanshbatham/[email protected] Usage headerpwn allows you to test various...
h2t
h2t - HTTP Hardening Tool Description h2t is a simple tool to help sysadmins to hardening their websites. Until now h2t checks the website headers and recommends how to make it better. Dependences Python 3 colorama requests Install root@kitploit: $ git clone https://github.com/gildasio/h2t $ cd h...
nextjs-CVE-2025-29927
nextjs-CVE-2025-29927 Un template di Nuclei per rilevare CVE-2025-29927, la vulnerabilità di bypass dell'autenticazione di Next.js. Se vuoi capire esattamente come funziona questa vulnerabilità, puoi leggere l'ottimo articolo dei ricercatori originali qui Questo template è abbastanza semplice. Fa...
zeek-netsupport-detector
NetSupport Contexto https://unit42.paloaltonetworks.com/cortex-xdr-detects-netsupport-manager-rat-campaign/ PCAP de teste: https://app.any.run/tasks/b5d9853f-0dca-45ef-9532-83feeedcbf42 Exemplo: root@kitploit: $ zeek -Cr b5d9853f-0dca-45ef-9532-83feeedcbf42.pcap $ cat notice.log separator \x09...
ipsourcebypass
This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses...
EasyScan
EasyScan EasyScan è uno script Python che analizza la sicurezza di un dato sito web ispezionando le sue intestazioni HTTP, record DNS e altre configurazioni. Lo script genera un report di sicurezza con un punteggio, un voto e raccomandazioni per affrontare potenziali vulnerabilità. Funzionalità e...
Wagtail: Identification of documents by SHA1 hash
Impact By passing specific HTTP headers to the document serve URL endpoint, an attacker was able to determine whether a document with a given ID matched a specified SHA1 hash, regardless of any permission restrictions on the document or knowing its filename. This could allow an attacker to...
BIT-RCLONE-2026-71310 rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...
Improper Input Validation
Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered operationName and operationNamespace headers from inbound HTTP requests, which allows an attacker to control the SOAP operation invoked by the CXF producer and potentially trigger unintended or...
Improper Input Validation
Apache Camel JIRA component is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of JIRA control headers, where attacker-controlled HTTP headers can override configured issue keys, project keys, transitions, and other operation parameters, allowing...
