CVE-2023-44487

कृपया ध्यान दें कि उपरोक्त कोड HTTP अनुरोध करने के लिए libcurl लाइब्रेरी का उपयोग करता है। कोड संकलित करते समय आपको libcurl स्थापित करना और उससे लिंक करना होगा। कोड एक सरलीकृत संस्करण है, और आपको अपनी सटीक आवश्यकताओं और आप जिस HTTP/2 हमले के विशिष्ट व्यवहार का परीक्षण कर रहे हैं, उसके आधार पर इसे...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

[SECURITY] [DSA 6467-1] freecad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6467-1 [email protected] https://www.debian.org/security/ Aron Xu August 26, 2026 https://www.debian.org/security/faq -...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

CVE-2025-61163

Cohere North AI v1.1.5 contains an excessively permissive cross-domain policy that allows untrusted domains to interact with the service. The root cause is the server failing to validate the Origin header of incoming connection requests, effectively granting cross-origin access to any domain with...

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Avviso di sicurezza per la vulnerabilità di esecuzione remota di codice in Spring Cloud Gateway. Questa vulnerabilità si verifica quando Spring Cloud Gateway abilita ed espone l'endpoint Gateway Actuator: le applicazioni che utilizzano Spring Cloud Gateway...

CVE-2021-41773

Uso root@kitploit: usage: main.py -h -f FILE -s N --timeout SECONDS optional arguments: -h, --help show this help message and exit -f FILE, --file FILE File containing target URLs one per line -s N, --semaphore N Concurrent requests default: 10 --timeout SECONDS Request timeout in seconds default...

EUVD-2026-65608

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component that allows an attacker on an adjacent network to send specially crafted HTTP requests, leading to improper authentication . A successful exploit may result in code execution and privilege escalation , wit...

CVE-2022-29056

CVE-2022-29056 Exploit-Automatisierung für Bildungszwecke 🚨 📌 Beschreibung Dies ist ein Python-Skript mit grafischer Oberfläche Tkinter, das es dem Benutzer ermöglicht, automatisierte Anforderungssendungen an einen Login-Endpunkt zu testen. Ziel ist es zu simulieren, wie Server auf verschiedene...

BIT-KEYCLOAK-2024-4629 Keycloak: potential bypass of brute force protection

A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts before the system locks them out. Thi...

white-deface

Autore WHITE-DEFACE Questo è un semplice strumento per defacciare automaticamente siti web vulnerabili. Link al video tutorial in fondo a questa pagina ⚠️ Sfrutta la vulnerabilità WebDav per operare. Questo script invia richieste PUT ai siti web elencati nel file targets.txt. Le richieste non...

SpringBreakVulnerableApp

Aplicação Vulnerável Spring Break Esta é uma aplicação vulnerável para testar o exploit para a vulnerabilidade Spring Break CVE-2017-8046. AVISO! Esta aplicação contém sérias vulnerabilidades de segurança. Execute-a por sua conta e risco! Recomenda-se usar um ambiente com backup e isolado como um...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

stack-overflow-poc

CVE-2018-12086 PoC https://nvd.nist.gov/vuln/detail/CVE-2018-12086 https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2018-12086.pdf TL;DR: Einige OPC-UA-Stacks sind anfällig für einen Stack-Overflow beim Dekodieren speziell präparierter Anfragen. Erstellen m...

CVE-2026-56092

The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowing anonymous visitors to bypass extendToSubpages-inherited access restrictions on cached pages...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

strutser

strutser Este programa verifica a CVE-2017-5638. Uso root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...