Gotenberg <= 8.30.1 - Server Side Request Forgery

Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...

Loytec LGATE-902 <6.4.2 - Local File Inclusion

Loytec LGATE-902 versions prior to 6.4.2 suffers from a local file inclusion vulnerability. id: CVE-2018-14916 info: name: Loytec LGATE-902 6.4.2 - Local File Inclusion author: 0xAkoko severity: critical description: Loytec LGATE-902 versions prior to 6.4.2 suffers from a local file inclusion...

Budibase - Authentication Bypass

Budibase = 3.31.4 contains an authentication bypass caused by unanchored regex in authorized middleware matching webhook path patterns in query strings, letting unauthenticated remote attackers access any server-side API endpoint, exploit requires crafted request with webhook pattern in URL. id:...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

CVE-2022-22978

CVE 2022-22978: Bypass de Autorização no RegexRequestMatcher 🥶 Visão Geral De acordo com as informações que pesquisei, esta é uma vulnerabilidade relacionada à classe RegexRequestMatcher no framework Spring Security. Especificamente, aplicações que usam RegexRequestMatcher cuja expressão regular...

PhishingKitHunter

PhishingKitHunter Finden Sie Phishing-Kits, die die Dateien und Bilder Ihrer Marke/Organisation verwenden. PhishingKitHunter oder PKHunter ist ein Tool, das entwickelt wurde, um URLs von Phishing-Kits zu identifizieren, die in Phishing-Kampagnen gegen Ihre Kunden eingesetzt werden und dabei einig...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

git-vuln-finder

git-vuln-finder Trova potenziali vulnerabilità software dai messaggi dei commit git. Il formato di output è un JSON con il commit associato che potrebbe contenere una correzione relativa a una vulnerabilità software. La ricerca si basa su un insieme di espressioni regolari esclusivamente sui...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

struts1filter

struts1filter Una soluzione di filtro per i parametri delle richieste per Apache Struts 1 CVE-2014-0114 basata sul lavoro di Alvaro Munoz e il team HP Fortify. Per utilizzare questo filtro, aggiungi la seguente dichiarazione del filtro insieme al mapping appropriato nel descrittore web.xml...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...

httpgrep

Beschreibung Ein schnelles, asynchrones Python-Tool, das HTTPS-Server scannt und in HTTP-Antworttexten und -Headern nach Strings oder Regex-Mustern sucht. Es akzeptiert einzelne Hosts, URLs, CIDR-Bereiche, IP-Bereiche oder Dateien; scannt mehrere Ports pro Ziel einzeln, Komma-Listen oder Bereiche...

bordair-detector

Bordair Detector Un rilevatore a due stadi per tentativi di prompt injection e jailbreak negli input LLM. Un gate regex smista la maggioranza facile del traffico senza toccare il modello; tutto ciò che è ambiguo passa a un classificatore DeBERTa-v3 quantizzato che gira in ONNX. Lo stesso motore...

yaralyzer

THE YARALYZER Visually inspect all of the regex matches and their sexier, more cloak and dagger cousins, the YARA matches found in binary data and/or text. See what happens when you force various character encodings upon those matched bytes. With colors. Quick Start root@kitploit: pipx install...

yaralyzer

IL YARALYZER Ispeziona visivamente tutte le corrispondenze regex e i loro cugini più intriganti e misteriosi, le corrispondenze YARA trovate in dati binari e/o testo. Scopri cosa succede quando forzi varie codifiche di caratteri su quei byte corrispondenti. A colori. Avvio rapido root@kitploit:...

cloudformation-waf-acl

cloudformation-waf-acl Un template AWS CloudFormation utilizzato per fornire e gestire risorse AWS WAFv2, inclusi un Web ACL, gruppi di regole gestiti, un set di pattern regex personalizzato e un IP set. Componenti Il template fornisce: 1. Un AWS::WAFv2::WebACL. 2. Gruppi di regole di protezione...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...