CVE-2022-29056

CVE-2022-29056 Exploit Automation 교육 목적 🚨 📌 설명 로그인 엔드포인트에 대한 자동화된 요청 전송을 테스트할 수 있는 그래픽 인터페이스Tkinter를 갖춘 Python 스크립트입니다. 서버가 다양한 페이로드 크기에 어떻게 응답하는지 시뮬레이션하고 잠재적 결함을 분석하는 것이 목적입니다. ⚠️ 이 코드는 엄격히 교육 및 학습 목적으로만 제공됩니다. 오용은 불법이거나 보안 정책에 위반될 수 있습니다. 저자는 부적절한 사용에 대해 책임을 지지 않습니다. 🛠 기능 ✅ 대상 IP를 입력하고 페이로드 크기를...

headerpwn

headerpwn Фаззер для анализа того, как серверы реагируют на различные HTTP-заголовки. 🏗️ Установка ⛏️ Использование 📡 Проксирование HTTP-запросов Установка Чтобы установить headerpwn, выполните следующую команду: root@kitploit: go install github.com/devanshbatham/[email protected]...

CVE-2015-7547-master

이 코드는 있는 그대로 제공됩니다. 귀하께서는 이 코드로 인해 발생할 수 있는 모든 위험으로부터 자신, 재산, 데이터 및 타인을 보호할 책임이 있습니다. 이 코드는 귀하의 기기에서 예상치 못하거나 바람직하지 않은 동작을 유발할 수 있습니다. 이 코드는 귀하의 시스템에서 취약점을 탐지하지 못할 수도 있습니다. 이 POC는 서버 코드와 클라이언트 코드의 두 가지 구성 요소로 구성되어 있습니다. 서버 코드는 취약점을 트리거하여 클라이언트 코드를 충돌시킵니다. 또한 테스트 중에 이름 서버를 서버 코드를 가리키도록 설정해야 하며, 그렇...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 이 스크립트는 서버가 RSC/Next.js RCE 취약점 CVE-2025-55182 및 CVE-2025-66478의 영향을 받는지 감지합니다. 서버 응답에서 특정 취약점 시그니처를 확인합니다. 해당 시그니처는 Searchlight Cyber에 따르면 특정적이어야 합니다. 따라서 이 셸 스크립트의 구현은 Searchlight Cyber의 통찰을 따릅니다. 이 CVE들에 대한 추가 정보는 현재 독일어로만 제공되며, 독일 연방정보보안청의 공식 자료입니다: Rea...

CVE-2026-72579

An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...

CVE-2026-72579

An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...

CVE-2026-72579

NASA HyperCP (main branch) contains an OS command injection vulnerability exploitable by a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov. The Source/OBPGSession.py handler parses server response headers without sanitization and forwards attacker-c...

EUVD-2026-53332

nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recvreaddeviceidentificationres function FC 0x2B/MEI 0x0E, Read Device Identification in nanomodbus.c. The server-supplied objectlength field 0-246 is validated only against the remaining PDU size ressizeleft and...

CVE-2026-68579 FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read

FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...

Linux Distros Unpatched Vulnerability : CVE-2026-68579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. Wh...

CVE-2024-23564

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. The application includes checks in the initial requests to verif...

CVE-2024-23564

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. The application includes checks in the initial requests to verif...

CVE-2026-35149

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the applicati...

CVE-2026-35149

CVE-2026-35149 involves HCL DFXServer and describes an authentication bypass caused by server response manipulation. The vulnerability allows an unauthenticated attacker to gain access by intercepting and altering authentication responses, effectively bypassing verification. Reported CVSS-3.1 met...

CVE-2026-51926

An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability was identified in the authentication mechanism that allows user enumeration through the login interface. An attacker can differentiate between valid...

CVE-2026-58471 GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2026-58471 GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

PT-2026-56240

Name of the Vulnerable Software and Affected Versions GNU Wget versions prior to 1.25.0 commit c2640fe Description A heap buffer overflow occurs in the convert fname function within src/url.c. This issue is triggered when a server-supplied filename requires character set conversion and the output...

PYSEC-2026-577 rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Summary Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response ...