abdal-anydesk-remote-ip-detector

Vulnerabilidad de Fuga de IP de AnyDesk CVE-2024-52940 🎤 Traducción del README Inglés Alemán فارسی 📸 Captura de pantalla 🎥 Videos de Prueba de Concepto Para ver la Vulnerabilidad de Fuga de IP de AnyDesk en acción, puedes descargar los videos de demostración del PoC a continuación: 📥 Descargar...

CVE-2017-7529

Vulnerabilidad de desbordamiento de enteros en Nginx CVE-2017-7529 Información de la vulnerabilidad Cuando se utilizan los módulos estándar de nginx, un atacante puede obtener la información del encabezado de los archivos en caché de la respuesta enviando solicitudes de cabecera header que...

CVE-2017-7529-POC

CVE-2017-7529-POC 漏洞影响 该漏洞影响所有 0.5.6 - 1.13.2版本内默认配置模块的Nginx只需要开启缓存攻击者即可发送恶意请求进行远程攻击造成信息泄露。当Nginx服务器使用代理缓存的情况下攻击者通过利用该漏洞可以拿到服务器的后端真实IP或其他敏感信息。 通过我们的分析判定该漏洞利用难度低可以归属于low-hanging-fruit的漏洞在真实网络攻击中也有一定利用价值。 影响版本 Nginx version 0.5.6 - 1.13.2 修复版本 Nginx version 1.13.3, 1.12.1...

webrtc-ips

用于 WebRTC 的 STUN IP 地址请求 演示：https://diafygi.github.io/webrtc-ips/ 功能说明 Firefox 和 Chrome 已实现 WebRTC，允许向 STUN 服务器发出请求，这些请求将返回用户的本地和公网 IP 地址。这些请求结果对 javascript 可用，因此你现在可以在 javascript 中获取用户的本地和公网 IP 地址。此演示是该功能的一个示例实现。 此外，这些 STUN 请求是在正常的 XMLHttpRequest 流程之外发起的，因此它们在开发者控制台中不可见，也无法被 AdBlockPlus 或 Ghoste...

cloud-buster

Cloudflare Resolver 一个全面的渗透测试工具，用于检测启用Cloudflare的网站是否存在源IP泄露问题。 它充满了出色的功能！ 扫描各种配置错误和漏洞 搜索其他IP解析服务数据库 详细展示源IP及相关服务的IP 智能引擎确认匹配结果 多种命令行参数用于自定义和微调 支持目标列表实现自动化扫描 警告 我已离开黑客圈，因此归档了这个项目。它仍然很棒，你可以继续使用和Fork。 依赖项 Python 3.5 dnspython3 1.14.0 libssl openssl 使用方法 基本用例 简单（快速）扫描：python3 bust mydomain.com...

cve-2024-56800-poc

cve-2024-56800 POC Referencia https://nvd.nist.gov/vuln/detail/CVE-2024-56800 https://github.com/firecrawl/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec https://github.com/firecrawl/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 Vulnerabilidad Firecrawl es un raspador web que permi...

MAL-2026-10734 Malicious code in infrastructure-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64169ae87d8d9eaad199be028a70610f025f61e0c947838c05c24a1dd4d5578 package.json declares a preinstall lifecycle script that runs node -e to issue an HTTP GET to a Burp Collaborator subdomain at...

CVE-2021-22169

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988973 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubpro...

EUVD-2019-7217

Malware in sbrugna...

EUVD-1999-1270

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-10087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the...

Linux Distros Unpatched Vulnerability : CVE-2020-35111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content canno...

CVE-2019-16651

An issue was discovered on Virgin Media Super Hub 3 based on ARRIS TG2492 devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user if they are using certain VPN implementations, this would...

CVE-2025-23073 API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2024-52940

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID...

Exploit for CVE-2024-52940

AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Tra...

BIT-GITLAB-2021-22169

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...

DoLogin Security < 3.7.1 - Subscriber+ IP Address leak

Description The plugin does not restrict the access of a widget that shows the IPs of failed logins to low privileged users. Just login to subscriber account and go to: http://localhost/wp-admin/index.phplog...

AtlasVPN Linux Client 1.0.3 IP Leak Vulnerability

Remote disconnect exploit for AtlasVPN Linux client version 1.0.3 that will allow a remote website to extract a client's real IP address. The following is my 0day. This code, when executed on any website, disconnects the AtlasVPN linux client and leaks the users IP address. I am not yet aware of ...