ipsourcebypass

يمكن استخدام هذا النص البرمجي بلغة بايثون لتجاوز قيود مصدر IP باستخدام رؤوس HTTP. الميزات 17 رأس HTTP. تعدد الخيوط. تصدير بصيغة JSON باستخدام --json outputfile.json. الكشف التلقائي عن أنجح عمليات التجاوز...

CVE-2024-40725

Outil de détection de contrebande de requêtes HTTP Ce dépôt contient un outil basé sur Python pour détecter les vulnérabilités de contrebande de requêtes HTTP, ciblant spécifiquement CVE-2024-40725. L'outil tente d'exploiter cette vulnérabilité dans le serveur HTTP Apache en envoyant des requêtes...

CVE-2026-79017

CVE-2026-79017 is a race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage a crafted Chrome extension to bypass system access restrictions . Chromium rates the security severity as Low . The fix is available in Chrome 152.0.7977.65 (S...

CVE-2026-79225

CVE-2026-79225 is an incorrect authorization vulnerability in Google Chrome for Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass system access restrictions through UI Interaction . Chromium rates the security severity as Low . The fix is included in ve...

CVE-2026-79077

CVE-2026-79077 is an incorrect authorization vulnerability in WebProtect in Google Chrome prior to 152.0.7977.65 . A remote attacker could bypass system access restrictions by delivering a crafted HTML page to the user. The Chromium team rated the security severity as Low . The fix is available i...

CVE-2026-79211

CVE-2026-79211 is an incorrect authorization vulnerability in the USB subsystem of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could bypass system access restrictions by delivering a crafted HTML page to a victim. The Chromium security team rates the ...

CVE-2026-79003

CVE-2026-79003 is an incorrect authorization vulnerability in the Device component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could exploit this via a crafted HTML page to bypass system access restrictions . Chromium assigned a M...

CVE-2026-78959

Google Chrome prior to 152.0.7977.65 contains a vulnerability in the FileSystem component caused by improper handling of case sensitivity . A remote attacker, leveraging social engineering , can bypass system access restrictions by delivering a crafted HTML page. The Chromium security severity is...

CVE-2026-79099

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium project classified the severity as Medium . Remediation is available by updating to Chrome 152.0.7977.65 or l...

CVE-2026-79094

CVE-2026-79094 is a race condition in the Workers component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass system access restrictions . Chromium assigned it a Medium security severity. The fix is available in ...

CVE-2026-79151

An improper input validation vulnerability in the Safebrowsing component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Rated Medium severity by Chromium, the flaw enables remote exploitation, though specific user...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in BFCache (Back/Forward Cache) in Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could craft an HTML page to bypass system access restrictions . Chromium rates the severity as Medium . The fix shi...

CVE-2026-79143

Incorrect authorization in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker , leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The Chromium security severity is rated Medium . The fix is included in Chrome 152....

CVE-2026-79049

CVE-2026-79049 is a medium-severity vulnerability in Google Chrome's Passwords component, caused by an incorrect reference resolution that allowed a remote attacker to bypass system access restrictions via a crafted file. The flaw affected Chrome versions prior to 152.0.7977.65 , where a fix was ...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could exploit the issue through a crafted HTML page to potentially bypass system access restrictions...

CVE-2026-79226

Google Chrome prior to 152.0.7977.65 is affected by an improper privilege management flaw in the Regional Capabilities component. A remote attacker leveraging social engineering can exploit this through a crafted Chrome extension to bypass system access restrictions . Chromium rates the severity ...

CVE-2026-79067

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass system access restrictions via a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. The attac...

CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...

Chankro

Chankro 펜테스트에서 disablefunctions 및 openbasedir를 우회하는 가장 좋아하는 도구입니다. 작동 방식 Linux의 PHP는 mail 함수가 실행될 때 바이너리sendmail를 호출합니다. putenv가 허용된 경우 환경 변수 "LDPRELOAD"를 설정하여 임의의 공유 객체를 사전 로드할 수 있습니다. 우리의 공유 객체는 PHP 제한 없이 사용자 지정 페이로드바이너리 또는 bash 스크립트를 실행하므로, 예를 들어 리버스 셸을 얻을 수 있습니다. 예제: 구문은 매우 간단합니다:...

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 में IP प्रतिबंध बायपास और डिफ़ॉल्ट एडमिन AIP टोकन का उपयोग करके रिमोट कोड निष्पादन RCE पूर्ण वॉकथ्रू https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...