dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

CVE-2021-21014

PoC Limited CVE-2021-21014 Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Affected version: = Magento 2.4.1 User...

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 Exploit Summary An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key w...

CVE-2022-31813

Launch the Range docker compose up --build Normal Access GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

CVE-2024-40725

HTTP Request Smuggling Detection Tool This repository contains a Python-based tool to detect HTTP Request Smuggling vulnerabilities, specifically targeting CVE-2024-40725. The tool attempts to exploit this vulnerability in Apache HTTP Server by sending crafted HTTP requests and analyzing the...

CVE-2023-44061

File-upload-Restriction-bypass...

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

CVE-2020-29607

CVE-2020-29607-Exploit Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated CVE description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality,...

Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token Full walkthrough https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introduction This script checks for the CVE-2025-29927 vulnerability in Next.js servers by testing multiple payloads in the x-middleware-subrequest header to detect unauthorized access. ❓ What is CVE-2025-29927? CVE-2025-29927 is a vulnerability that allows security...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager . But, we can do a little trick: function getextensionfrommime works based on first several chars of file. So, if we start our payload with several 'a' chars, it can be detected with txt type. How to exploit 1. Intercept upload request with burp...

CVE-2026-119364 ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass

ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in modcopy that allows authenticated FTP users to bypass Limit WRITE restrictions via symlinks. Attackers can place a symlink in a writable directory and use SITE COPY or SITE CPTO to overwrite files in...

CVE-2026-110196

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

CVE-2026-99096

A flaw was found in the Linux kernel's iouring subsystem. A local user can bypass security restrictions by creating an initially disabled asynchronous I/O ring. Because disabled rings failed to enforce inherited task restrictions prior to activation, an attacker can execute restricted register...

Authlib: OpenID Implicit Grant Checks Raw Scope Instead Of Allowed Scope Before Issuing ID Tokens

Report metadata | Field | Value | | --- | --- | | Package | "authlib" PyPI, "pkg:pypi/authlib" | | Repository | https://github.com/authlib/authlib | | Component | "authlib.oidc.core.grants.implicit.OpenIDImplicitGrant.validateauthorizationrequest" | | Vulnerability class | Authorization bypass: a...

CVE-2026-105612

The PostgreSQL Anonymizer extension is vulnerable to a security bypass where data-modifying Common Table Expressions (CTEs) can circumvent the read-only restrictions imposed on masked roles. This issue is associated with CWE-862 (Missing Authorization) . The vulnerability is addressed in PostgreS...

CVE-2026-105612 PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

HPESBNW05166 rev.1 - HPE Networking Advance Notification of Security Advisories for November 03, 2026.

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA IMPORTANT NOTE: In this advance notification, HPE Networking will not provide affected software versions Aruba Fabric Composer IMPORTANT...

CVE-2026-105612: Missing Authorization

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...