CVE-2023-40933-PoC

CVE-2023-40933 Il payload sqlmap per sfruttare CVE-2023-40933 Payload Informazioni richieste: Nome utente e password validi Dominio e percorso dell'istanza ospitata root@kitploit: sqlmap -D nagiosxi -T xiusers -u...

HTTPSignatures

Estensione Burp Suite HTTPSignatures HTTPSignatures è un'estensione Burp Suite che implementa la bozza di specifica Signing HTTP Messages draft-ietf-httpbis-message-signatures-01. Ciò consente agli utenti di Burp Suite di testare senza soluzione di continuità applicazioni che richiedono le HTTP...

CVE-2026-59321

A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null not thread-safe, e.g. the Kotlin kts engine, concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers...

CVE-2026-59322

The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizin...

CVE-2026-59305

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2024-27304-PoC

CVE-2024-27304-PoC riferimenti DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp Una semplice applicazione web con funzionalità di login. Solo gli amministratori possono accedere. Questa...

burp-jq

Burp JQ هذا امتداد لـ Burp لتطبيق استعلامات jq على محتوى JSON من عارض رسائل HTTP. البناء root@kitploit: $ gradle fatJar الاعتمادات يعتمد Burp JQ على jackson-jq، وهو تطبيق Java لـ jq. jq jackson jackson-jq...

tlsenum

tlsenum tlsenum è uno strumento di enumerazione TLS da riga di comando che tenta di enumerare quali suite di cifratura TLS un server supporta e di elencarle in ordine di priorità. Funziona inviando messaggi TLS ClientHello e analizzando le risposte ServerHello del server. tlsenum presume che sia ...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 consente l'iniezione di messaggi di avviso. Scoperto: 15 febbraio 2022 Versioni interessate: 9.4 Exploit POC: SASLogon/csrf ha un parametro chiamato "target" Questo parametro influisce sul messaggio di avviso per l'URL che l'utente stava per aprire ma, a causa...

CVE-2026-59324 fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction

When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...

CVE-2026-59324

Spring Integration is vulnerable to cross-message header leakage when an IntegrationFlow uses .fluxTransform() with an asynchronous or reordering fluxFunction that emits raw payloads. The root cause is a shared RequestMessageHolder , which causes concurrent requests on the same FluxMessageChannel...

EUVD-2026-67203

The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizin...

CVE-2026-59321

Spring Integration versions 7.1.0 , 7.0.0–7.0.5 , 6.5.0–6.5.10 , 6.4.0–6.4.12 , and 5.5.21 and earlier are affected by a thread-safety flaw in script-backed channels. A single JSR-223 ScriptEngine instance is shared across all messages without verifying the engine's THREADING capability. When a n...

CVE-2026-59321 Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check

A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null not thread-safe, e.g. the Kotlin kts engine, concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers...

EUVD-2026-67191

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59305

Spring Cloud Stream versions 4.2.0–4.2.6, 4.3.0–4.3.3, and 5.0.0–5.0.2 are affected by an issue where the partition interceptor may be improperly added while sending a message. The vulnerability is rated LOW severity (CVSS 3.1: 3.1), requiring high privileges, user interaction, and presenting hig...

CVE-2026-59305 Partition interceptor may be improperly added while sending message

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-26457

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapdumpmsg function when processing COAP messages containing options with zero length...

CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs Iniezione di header tramite attributi di messaggio in entrata Reproducer proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime:...

toothfairy

toothfairy Correlato a brokentooth link in basso. A differenza di brokentooth, toothfairy non richiede di premere pulsanti nel menu bluetooth. Entrambe le CVE sono state rivelate da @SparkZheng ma senza POC, quindi ho deciso di creare un POC per imparare. Il codice non è perfetto ma fa il suo...