CVE-2026-107292

A flaw was found in pydantic-ai. The web development chat server fails to validate incoming HTTP Host headers, allowing a remote attacker to achieve unauthorized tool execution and information disclosure. If a developer running the local development server visits a malicious website, an attacker...

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855، المعروف أيضًا باسم Proxylogon، هو ثغرة تزوير طلبات من جانب الخادم SSRF في Exchange تسمح للمهاجم بإرسال طلبات HTTP عشوائية والمصادقة كخادم Exchange. وفقًا لـ Orange Tsai، الباحث الذي اكتشف الثغرات، تسمح CVE-2021-26855 بتنفيذ التعليمات البرمجية عند ربطها مع...

CVE-2021-2302

CVE-2021-2302 लेखक: quynhle गैजेट श्रृंखला javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC एक सरल PowerShell स्क्रिप्ट है जो एक्सचेंज सर्वर पर चलती है और हाफनियम गतिविधि रिलीज द्वारा माइक्रोसॉफ्ट द्वारा 2021-03-02 को जारी किए गए समझौता संकेतकों IOCs की पहचान करने के लिए है https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/। अध...

CVE-2024-38077

CVE-2024-38077-EXP كود تم إصلاحه بناءً على الكود الزائف. النطاق الصالح EXP: Windows Server 2025 POC: 08-25 الاستخدام options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR अरे, इस LetsDefend लैब में मैंने ToolShell CVE-2025-53770 नामक SharePoint जीरो-डे का गहराई से अध्ययन किया। मूलतः, मैंने एक वास्तविक-दुनिया के हमले का अनुकरण किया जहाँ एक दुर्भावनापूर्ण POST अनुरोध ने प्रमाणीकरण को बायपास किया,...

CVE-2026-97031

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...

CVE-2026-94439

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

DEBIAN-CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

DEBIAN-CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

Explotando-FreeFloatFTP-CVE-2025-5548

शोषण-FreeFloatFTP-CVE-2025-5548 मेरे शोषण अनुसंधान और विकास भंडार में आपका स्वागत है। यह परियोजना FreeFloat FTP Server में पाई गई CVE-2025-5548 स्टैक-आधारित बफर ओवरफ्लो भेद्यता का पूर्ण तकनीकी विश्लेषण, पर्यावरण तैयारी और चरण-दर-चरण शोषण का दस्तावेजीकरण करती है। 🌱 व्यक्तिगत नोट: यह परियोजना मेरा...

react2shell-scanner

react2shell-scanner Next.js अनुप्रयोगों में CVE-2025-55182 और CVE-2025-66478 दूरस्थ कोड निष्पादन का पता लगाने के लिए एक उच्च-सटीकता वाला कमांड-लाइन भेद्यता स्कैनर, जो React Server Components RSC का उपयोग करता है। 🚨 भेद्यता अवलोकन ये गंभीर भेद्यताएँ React Server Components का उपयोग करने वाले Next....

CVE-2025-55182

CVE-2025-55182: React2Shell - مجموعة أدوات تنفيذ الأوامر عن بُعد في Next.js !WARNING هذه الأداة مخصَّصة للاختبار المصرَّح به والأغراض التعليمية فقط. الوصول غير المصرَّح به إلى الشبكات واستخراج البيانات أمران غير قانونيين. يتحمَّل المستخدمون مسؤولية التأكد من حصولهم على التصريح المناسب قبل استخدام...

SNet

SNet 日本語版はこちら / Japanese version مسابقة CTF حيث تستخدم الذكاء الاصطناعي لالتقاط العلم. لا خبرة في اختبار الاختراق؟ لا مشكلة. يعمل Claude Code كمدرب شخصي لك — فهو يُعد البيئة، ويُعلمك الأدوات، ويوجهك عبر تقنيات الهجوم الحقيقية خطوة بخطوة. أنت تكتب كل أمر بنفسك. ما هو SNet؟ SNet هو جهاز افتراضي ضعي...

CVE-2025-471812-POC

/ | / | / / | / / / |/ // / / / / / / &password= 2. يقوم الخادم بمصادقة "anonymous" مقطوع عند البايت الصفري ولكنه يكتب الحمولة الكاملة في ملف الجلسة → يعيد ملف تعريف ارتباط UID 3. GET /dir.html Cookie: UID= يقوم الخادم بت...

CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

EUVD-2026-95427

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...