dnsFookup

DnsFookup v 2.0.1 Revinculación de DNS framework que contiene: un servidor DNS obviamente API web en Python para crear nuevos subdominios y controlar el servidor DNS, ver registros, cosas por el estilo una cutre aplicación React para hacerlo más cómodo Registro de cambios Documentación de la API...

CVE-2022-4539

Considerazioni sull'uso: Adattabilità: Puoi facilmente modificare i payload, la logica di generazione degli IP e i proxy per adattarli a diversi scenari o ambienti. Uso etico: Assicurati di avere il permesso esplicito prima di testare qualsiasi sistema con questo codice. Scalabilità: Questo codic...

cowitness

CoWitness CoWitness ist ein Tool, das als HTTP-, HTTPS- und DNS-Server fungiert. Es ermöglicht Ihnen, Webseiten bereitzustellen, HTTP-Anfragen zu protokollieren und DNS-Antworten anzupassen. Diese README bietet einen Überblick über die Funktionen und Anweisungen zum Kompilieren und Verwenden des...

Pentest-Mapper

Pentest Mapper Pentest Mapper è un'estensione di Burp Suite che integra la registrazione delle richieste di Burp Suite con una checklist personalizzata per il test delle applicazioni. L'estensione fornisce un flusso semplice per i test di penetration testing delle applicazioni. L'estensione inclu...

CVE-2026-72817

go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP Request.RemoteAddr using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the fir...

CVE-2026-72817 go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For

go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP Request.RemoteAddr using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the fir...

CVE-2026-7828 UltraVNC repeater integer overflow in win_log malloc leading to heap overflow

UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In repeater/webgui/settings.c:336, the winlog function allocates list nodes via mallocsizeofstruct LIST + strlenline, where line is derived from HTTP request URIs. If strlenline is sufficiently large,...

morgan 安全漏洞

Morgan is an open-source HTTP request logging middleware developed by ExpressJS. Versions 1.2.0 to 1.10.1 of Morgan contain security vulnerabilities. These vulnerabilities stem from the remoteuser token not being escaped with control characters, which may lead to log manipulation...

CVE-2026-44516 Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer

Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body, response body, and response headers...

Valtimo has sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer

Summary The LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body, response body, and response headers. When an error response is received, this information is included in the thrown...

EUVD-2008-6885

Malware in sbrugna...

EUVD-2020-0232

Malware in sbrugna...

EUVD-2022-1178

Malicious code in bioql PyPI...

EUVD-2022-51868

Malicious code in bioql PyPI...

EUVD-2022-28131

Malicious code in bioql PyPI...

EUVD-2022-51867

Malicious code in bioql PyPI...

EUVD-2022-51869

Malicious code in bioql PyPI...

EUVD-2025-20307

Malicious code in bioql PyPI...

CVE-2022-4536

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2022-4533

The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1.0. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...