CVE-2024-38821-POC

CVE-2024-38821 : Preuve de concept PoC : Contournement d'authentification dans Spring Framework Ceci est une preuve de concept pour la vulnérabilité CVE-2024-38821 Étapes d'exécution 1. Construire l'image Docker Spring Boot 3.3.4, basé sur Spring Framework 6.1.13 root@kitploit: cd vuln docker bui...

CVE-2026-52844

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but fileserver later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy...

FreeBSD : traefik -- Bypassing security controls via special characters (91b9790e-de65-11f0-b893-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 91b9790e-de65-11f0-b893-5404a68ad561 advisory. The traefik project reports: There is a potential vulnerability in Traefik managing the requests using ...