584 matches found
bypass-url-parser
Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...
forbidden
Forbidden Bypass códigos de estado de respuesta HTTP 4xx y más. La herramienta está basada en Python Requests, PycURL y HTTP Client. Probado en Kali Linux v2024.2 64-bit. Hecho con fines educativos. ¡Espero que sea útil! Planes futuros: Añadir la opción silent para suprimir la salida de consola...
dp_crypto
dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...
CVE-2019-17662
CVE-2019-17662 Se modificó el código de CVE Se utilizó Prepared Requests, ya que en el módulo python3 requests normaliza el ../ en URL como: Para el código: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode Resulta en: GET /test HTTP/1.1 Host: 123.123.123.123...
CVE-2022-22947
CVE-2022-22947 Exp Este error parece no ser recurrente cada vez. python3 requests...
exploit-writing-for-oswe
Exploit Writing for OSWE Background What This repository contains a list of useful snippets and tips that pertain to the writing of exploit scripts in the OSWE labs and certification exam. Some examples here may go against certain coding practices, but our end goal is to write the exploit script...
POC-CVE-2023-32681
POC para CVE-2023-32681 Esta es una implementación en Python 3 de CVE-2023-32681, que afecta a clientes que usan requests versión = 2.30.0. Según https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4, cuando el servidor emite una redirección 3xx, el agente de usuario debe modificar la solicitud...
Sharepoint-cve-2023-29375-incident-response
SOC Incident Analysis: Microsoft SharePoint Server Elevation of Privilege CVE-2023-29375 An in-depth security investigation of a critical exploit and enumeration attempt targeting a Microsoft SharePoint server. Incident Overview Alert Name: SOC227 - Microsoft SharePoint Server Elevation of...
Rocky Linux 8.6 [CIQ] Security Update: python38-requests Multiple Vulnerabilities (ciqsa-2026_0219)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260219 advisory. This advisory aggregates security fixes for the python-requests SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / etc Multiple Vulnerabilities (crlsa-2020_1605)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20201605 advisory. python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 python: Cookie domain check returns...
CVE-2024-21644-Poc
CVE-2024-21644 POC Install modules: pip install requests pip.install colorama...
EulerOS Virtualization 2.10.0 : python-requests (EulerOS-SA-2026-3884)
According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...
EulerOS Virtualization 2.10.1 : python-requests (EulerOS-SA-2026-3850)
According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...
EulerOS 2.0 SP10 : python-requests (EulerOS-SA-2026-3717)
According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...
EulerOS Virtualization 2.11.1 : python-requests (EulerOS-SA-2026-3467)
According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...
EulerOS 2.0 SP10 : python-requests (EulerOS-SA-2026-3764)
According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...
EulerOS Virtualization 2.11.0 : python-requests (EulerOS-SA-2026-3554)
According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...
CVE-2026-91943: Server-Side Request Forgery (SSRF)
Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where getpdfpath re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to access...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-requests (UTSA-2023-002301)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002301 advisory. Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint...
