272 matches found
Requests 安全漏洞
Requests is an elegant and simple HTTP library from the Python Foundation. With Requests, you can send HTTP / 1.1 requests very easily. There is no need to manually add query strings to your URLs or form-encode POST data. A security vulnerability exists in versions prior to Requests 2.32.0, which...
PT-2024-6103
Name of the Vulnerable Software and Affected Versions Requests versions prior to 2.32.0 Description The issue is related to the incorrect implementation of control flow in the Python Requests library, which can allow an attacker to access confidential data. When making requests through a Requests...
Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo
Cybersecurity researchers have identified a malicious Python package that purports to be an offshoot of the popular requests library and has been found concealing a Golang-version of the Sliver command-and-control C2 framework within a PNG image of the project's logo. The package employing this...
Exploit for Code Injection in Crushftp
CVE-2024-4040: CrushFTP File Read Vulnerability Overview...
Exploit for Code Injection in Crushftp
CVE-2024-4040 - exploit scanners This repository contains fil...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio
MinIO vulnerability exploit CVE-2023-28432 Description T...
Exploit for Command Injection in Dlink Dns-320L_Firmware
D-Link NAS Command Execution Exploit This Python script explo...
ROS-20240408-11
A vulnerability in the HTTP Requests library of the Python Requests programming language is related to insufficient protection of service data. inadequate protection of proprietary data. Exploitation of the vulnerability could allow an attacker acting remotely, gain unauthorized access to protect...
Exploit for Command Injection in Dlink Dns-320L_Firmware
CVE-2024-3273 Proof of Concept PoC This repository contains...
Exploit for Command Injection in Thimpress Learnpress
CVE-2023-6634 Exploit Script Description This repository...
Vul
This is a PoC exploit for an unspecified vulnerability in an uns...
Elementor Website Builder < 3.12.2 - Admin+ SQLi
EXPLOIT Elementor Website Builder Replace URL page. On the Replace URL page, enter any random string as the "New URL" and the following malicious payload as the "Old URL": code : http://localhost:8080/?test',metakey='key4'where+metaid=SLEEP2; Press "Replace URL" on the Replace URL page. Burp...
Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect
CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exp...
Exploit for Code Injection in Microsoft
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the...
Enrollment System 1.0 SQL Injection
Exploit Title: Enrollment System v1.0 - SQL Injection Date: 27 December 2023 Exploit Author: Gnanaraj Mauviel @0xm3m Vendor: Obi08 Vendor Homepage: https://github.com/Obi08/EnrollmentSystem Software Link: https://github.com/Obi08/EnrollmentSystem Version: v1.0 Tested on: Mac OSX, XAMPP, Apache,...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! options Arguments - url: Root URL base...
Exploit for Path Traversal in Jenkins
CVE-2024-23897: Jenkins Arbitrary File Read Vulnerability Lead...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 This script provides an automated Proof of C...
EulerOS Virtualization 2.9.0 : python-pip (EulerOS-SA-2023-2995)
According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination server...