php-app-race-condition

Applicazione PHP vulnerabile Race Condition Configurazione dell'ambiente: root@kitploit: docker-compose up Verifica dell'ambiente: Test di connessione: http://localhost/test.php Endpoint vulnerabile: http://localhost/poc.php Sfruttamento della race condition: root@kitploit: echo http://localhost ...

http_bridge

Ponte HTTP Motivação Escrevi este programa como uma prova de conceito para testar a ideia de ser capaz de enviar pacotes de fluxo TCP sobre requisições HTTP simples como PUT, PATCH, POST, GET, sem usar uma forma de proxy como o método CONNECT. Também como um exercício prático para treinar minha...

Journyx - XML External Entities Injection (XXE)

The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. id: CVE-2024-6893 info: name: Journyx - XML...

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

St. Joe ERP system - SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

DATAGERRY - REST API Auth Bypass

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. id: CVE-2024-46627 info: name: DATAGERRY - REST API Auth Bypass author: gy741 severity: critical description: | Incorrect access control in BECN DATAGERRY v2.2 allows attackers...

kkFileView 4.0 - Server-Side Request Forgery

kkFileView 4.0 contains a server-side request forgery caused by improper validation in OnlinePreviewController.java, letting attackers induce the server to make arbitrary requests, exploit requires sending crafted requests. id: CVE-2022-42149 info: name: kkFileView 4.0 - Server-Side Request Forge...

LobeHub LobeChat <= 2.1.56 - Server-Side Request Forgery

LobeHub LobeChat versions up to and including 2.1.56 are vulnerable to an unauthenticated server-side request forgery vulnerability in the /webapi/proxy endpoint. The endpoint accepts a URL in the POST request body and fetches it server-side without authentication. id: CVE-2026-54157 info: name:...

Fastjson Insecure Deserialization - Remote Code Execution

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi-// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...

webp_server_go 0.4.0 - Path Traversal

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. id: CVE-2021-46104 info: name: webpservergo 0.4.0 - Path Traversal author: pikpikcu severity...

Dify v1.6.0 - Server-Side Request Forgery

Dify v1.6.0 contains a server side request forgery caused by improper validation in controllers.console.remotefiles.RemoteFileUploadApi, letting attackers make arbitrary requests from the server, exploit requires network access. id: CVE-2025-56520 info: name: Dify v1.6.0 - Server-Side Request...

ChanCMS <= 3.3.0 - Server-Side Request Forgery

yanyutao0402 ChanCMS 3.3.0 contains a server-side request forgery caused by manipulation of the "taskUrl" argument in /cms/collect/getArticle, letting remote attackers make arbitrary requests, exploit requires no special privileges. id: CVE-2025-10211 info: name: ChanCMS = 3.3.0 - Server-Side...

CVE-2022-24112

CVE-2022-24112 Apache APISIX batch-requests RCECVE-2022-24112 root@kitploit: 将目标放入url.txt python3 ApacheAPISIXRCECVE-2022-24112.py Cmd:...

HttpStrike

HttpStrike Ein schnelles DDoS-Skript, geschrieben in Python. Es sendet viele GET-Anfragen, wenn Sie die Anzahl der Anfragen nach Belieben erhöhen...

sricam-gsoap2.8-dos-exploit

sricam-gsoap2.8-dos-exploit Sricam-gSOAP2.8-DoS-Exploit Proof of Concept Proof-of-Concept-Code: SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 Thanks to the CVE Assignment Team for their help structuring the following: Beschreibung Sricam-IP-Überwachungskameras sind...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 и CVE-2025-48976 О проекте Этот проект запускает простую конечную точку загрузки файлов с Tomcat 10.1.41 и Jakarta Servlet. По умолчанию эксплойт запускает 1000 параллельных multipart-запросов с 1000 частей и 50 заголовками на часть, от 50 рабочих. Запуск POC Соберите и запустите...

webrtc-ips

STUN-IP-Adressanfragen für WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Was das macht Firefox und Chrome haben WebRTC implementiert, das Anfragen an STUN-Server ermöglicht, die die lokalen und öffentlichen IP-Adressen des Benutzers zurückgeben. Diese Anforderungsergebnisse stehen JavaScript...

burpflow

BurpFlow BurpFlow é uma ferramenta CLI leve em Node.js que roteia requisições HTTP através de um proxy Burp Suite, permitindo que testadores de segurança carreguem e analisem rapidamente URLs de reconhecimento dentro do Burp. 🎯 O que é o BurpFlow? BurpFlow é uma ferramenta CLI de automação de...

Bulk_403_Bypass

Bypass 403 di massa Questo è uno script Bash che esegue un bypass 403 di massa aggiungendo un'intestazione personalizzata alle richieste HTTP. Può essere utile per testare se un sito web è vulnerabile alle tecniche di bypass 403. Utilizzo Per utilizzare lo script, passa una lista di URL come...

EUVD-2026-66831

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...