CVE-2024-38821-POC

CVE-2024-38821：概念验证（PoC）：Spring Framework 中的认证绕过 这是针对 CVE-2024-38821 漏洞的概念验证 执行步骤 1. 构建 Docker 镜像（基于 Spring Framework 6.1.13 的 Spring Boot 3.3.4） root@kitploit: cd vuln docker build -t cve-2024-38821-poc . 2. 运行容器并将主机的端口 8080 暴露给容器 root@kitploit: docker run -d -p 8080:8080 --name cve-2024-38821-p...

CVE-2026-52844

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but fileserver later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy...

FreeBSD : traefik -- Bypassing security controls via special characters (91b9790e-de65-11f0-b893-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 91b9790e-de65-11f0-b893-5404a68ad561 advisory. The traefik project reports: There is a potential vulnerability in Traefik managing the requests using ...