CVE-2023-23752

CVE-2023-23752 simple program for joomla CVE-2023-23752 scanner, This is a simple Ruby script that checks if a list of targets is vulnerable to CVE-2023-23752, a critical security vulnerability in a web application. The script sends a HTTP GET request to a specified endpoint, and extracts...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Welcome to the official repository documenting the discovery and details of CVE-2025-26206 , a critical Cross-Site Request Forgery CSRF vulnerability in Sell Done Storefront v.1.0. Discovered by B. Sibhi , this...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

Hermes-Proxy

Hermes Proxy Hermes Proxy is a desktop HTTP/HTTPS interception app built with Electron and Vite. It captures requests/responses, lets you replay requests, and export/import HAR files. Features Live traffic table with request/response details Replay requests with editable URL/headers Export all...

POC-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Demo Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

netwave-dosvulnerability

Netwave IP Camera server vulnerable to unauthenticated Denial of Service via one single huge POST request on any firmware. CVE| Description ---|--- CVE-2018-6479| Unauthenticated remote Denial of Service vulnerability CVSS| Score| Details ---|---|--- 3| 7.3|...

CVE-2025-0108-Authentication-Bypass-checker

This tool tests whether a target PAN-OS device is vulnerable to the CVE-2025-0108 authentication bypass vulnerability . It sends a crafted HTTP request to the target and analyzes the response to determine if the device is exploitable. Usage single ip root@kitploit: python authbypasscve20250108.py...

dnstake

DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain subdomain.example.com or domain has its authoritative nameserver set to a provider e.g. AWS Route 53, Akamai, Microsoft Azure, etc...

CVE-2020-5902-Vuln-Checker

CVE-2020-5902 Vulnerability Checker While looking at the vulnerabilty with fellow researchers we came to the idea that most of the current ways in which to test for the vulnerability can be classed as a form of compromise of the system. We wanted to develop a way in which to test the vulnerabilit...

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting A stored cross-site scripting XSS in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Nagios Log Server 2.1.7 and older versions are affected...

layne

Layne Layne is a self-hosted GitHub App that centralizes security scanning across our repositories. Since we don't use commercial SAST/secrets scanning tools, nor we have access to GitHub Enterprise, it can get hard to maintain different GitHub Actions workflow files across different repositories...

CVE-2018-7600

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2018-7600 - Day Started: 26/06/2024. Table of contents: 1. CVE summary 2. Prerequisites 3. CVE Analyse 4. Mitigation CVE summary An attacker could call a Drupal Form API Ajax Request containing the calluserfunc auto do function Drupal before 7.58,...

CVE-2025-25296

CVE-2025-25296 Proof of Concept POC Description This project demonstrates a Proof of Concept POC for the CVE-2025-25296 vulnerability affecting Label Studio, an open-source data labeling tool. The vulnerability resides in the /projects/upload-example endpoint, which fails to sanitize user-provide...

HTTPLeaks

HTTPLeaks What is this? This project aims to enumerate all possible ways, a website can leak HTTP requests. In one single HTML file. See the file leak.html raw text version in the root of this repository. What is it for? You can use this to test your browser for CSP leaks , your web-mailer for HT...

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1.The vulnerability exists in the Project Selector component, where project names returned via an AJAX request are inserted into the page without proper output...

cve-2017-7269

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: http://" in a PROPFIND request, as exploited in the wild ...

cowitness

CoWitness CoWitness is a tool designed to function as an HTTP, HTTPS, and DNS server. It allows you to serve web pages, log HTTP requests, and customize DNS responses. This README provides an overview of the features and instructions on how to compile and use the CoWitness tool. Features HTTP...

CVE-2026-9336

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-9338

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...

CVE-2026-89049

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...