EUVD-2026-93945

Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

CVE-2026-101150

A vulnerability exists due to insufficient validation of OIDC bearer token configuration . This flaw could allow an attacker with specific high privileges to perform Server-Side Request Forgery (SSRF) by directing requests to arbitrary destinations. The impact is categorized as Medium severity, w...

CVE-2026-101149

A vulnerability exists due to insufficient validation of OIDC SSO provider configuration . This flaw could allow a user with specific high privileges to perform a Server-Side Request Forgery (SSRF) by directing requests to arbitrary destinations. No specific software versions, affected components...

EUVD-2026-93946

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

ADCSDevilCOM

ADCSDevilCOM Una herramienta en C para solicitar certificados de ADCS utilizando DCOM sobre SMB. Esta herramienta permite solicitar remotamente certificados X.509 desde un servidor de CA usando el protocolo MS-WCCE sobre DCOM y evade el requisito tradicional del endpoint mapper al usar SMB...

CVE-2026-96580

The Gitea platform is vulnerable to memory exhaustion due to an uncontrolled resource consumption issue (CWE-400) within its Actions functionality. The vulnerability occurs because the system expands a workflow's static strategy.matrix into a full Cartesian product without a size limit when creat...

http-request-smuggling

Herramienta de Detección de Contrabando de Solicitudes HTTP El contrabando de solicitudes HTTP es una vulnerabilidad de alta gravedad que consiste en una técnica donde un atacante introduce de forma encubierta una solicitud HTTP ambigua para eludir los controles de seguridad y obtener acceso no...

http-request-smuggling

HTTP Request Smuggling Detection Tool HTTP request smuggling is a high severity vulnerability which is a technique where an attacker smuggles an ambiguous HTTP request to bypass security controls and gain unauthorized access to performs malicious activities, the vulnerability was discovered back ...

CVE-2026-94205

The Gitea Actions component is vulnerable to a workflow approval bypass when a maintainer triggers a pull_request activity, such as adding a label. The system incorrectly determines the need for approval based on the event triggerer (the maintainer) rather than the pull request author . This allo...

CVE-2026-103670

The Gitea actions system is vulnerable to unauthorized workflow cancellation. When a new actions run is inserted into a concurrency group with cancel-in-progress enabled, the system cancels older runs without verifying if the new run requires approval. Because fork pull request runs are inserted ...

eternalghosttest

Eternalghost Deutsch English Deutsch Dieses Repository enthält einen Testfall für CVE-2020-0796 Mit diesem kleinen Skript können Sie überprüfen, ob ein Server von Ihnen verwundbar ist. Das Skript prüft, ob Sie Compression aktiviert haben und die SMB-Version 3.1.1 ist. Das ganze geschieht über ein...

CVE-2026-104626

In Gitea , a flaw in how Actions handle run-level concurrency groups allows a user with fork pull request permissions to execute fork-controlled workflow code . An attacker can place workflow content into a run awaiting approval; if a subsequent run in the same concurrency group cancels the block...

CVE-2026-104632

Gitea Actions contains a workflow approval bypass where jobs from first-time fork pull request contributors can be executed without maintainer approval. The vulnerability exists because the rerun path only checks if a run has finished; it fails to verify pending approvals. Consequently, a user wi...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

CVE-2026-106216

Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Script de prueba de concepto para CVE-2020-3452 — Vulnerabilidad de Path Traversal en Cisco ASA/FTD. Admite extracción automatizada de archivos objetivo conocidos con un límite estricto en descargas exitosas por seguridad. Destinado únicamente a pruebas de...

CVE-2023-27163-POC

CVE-2023-27163 Poc of SSRF for Request-Baskets CVE-2023-27163 based on this code from entr0pie. The PoC is expanded to fuzz the content of another web service local or otherwise and return the content of the files found. Usage python3 CVE-2023-27163.py http://: -t http://: -w...

CVE-2023-27163

CVE-2023-27163 - Request Baskets SSRF Request Baskets SSRF PoC alt text Request Baskets versions notes Credit to @beet1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Article : https://notes.sjtu.edu.cn/s/MUUhEymt7...

CSRFER

CSRFER / / | \ | | \ | / /\ --.| |/ / | | | | |/ / | | --. \ /| | | || / | /// / |\ | | | || |\ \ //| \| /| | -.--. " '-, ',' 2 \ \q \ . \ .--' '----. / . . \ .'.' \ .-.\ '-, ,/ .---;- . \ \ .\ // '-. \ \ | '. , '-. c=' Cooo -. '-. '. '-. \ snd '-. '. '-. \ ---' CSRFER es una...