linux_mint_poc

Linux Mint 18.3-19.1 'yelp' command injection bug Root cause The URI handlers help://, ghelp://, and man:// are defined in the file /usr/share/applications/yelp.desktop which will execute /usr/local/bin/yelp via Exec=yelp %u whenever one of those URI handlers is invoked. The file...

CVE-2018-3760

CVE-2018-3760 Vulnerabilidad de Directory Traversal en el Asset Pipeline de Rails Descubierto por Orange Tsai Nota : De forma predeterminada, las aplicaciones Rails que se ejecutan en modo producción no son vulnerables a este exploit. Exploit: curl -v...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone exploit for the NGINX heap buffer overflow vulnerability discovered in 2024. This version is optimized for HackTheBox and CTF environments where you can't set up Docker containers. Vulnerability Details CVE-2026-42945 is a critical heap...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

CVE-2024-38200

CVE-2024-38200 Después del parche El método de captura del hash NTLMv2 a través de HTTP no fue corregido. El valor del hash NTLMv2 todavía se puede obtener a través de HTTP y retransmitirse a LDAP o ADCS. MSRC declaró que esta situación "tal como se presenta, parece ser parte del diseño actual"...

LFiFreak

LFI Freak Características Funciona con Windows, Linux y OS X Incluye bind y reverse shell tanto para Windows como para Linux Escrito en Python 2.7 ¿De qué se trata todo esto? Una herramienta única para explotar inclusiones de archivos locales usando los métodos PHP Input, PHP Filter y Data URI...

CVE-2014-6271

EXPLOTACIÓN PARA CVE-2014-6271 USO : CVE-2014-6271.py ruta completa a la uri objetivo comando...

CVE-2026-88782

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

PoC_CVE-2024-28157

CVE-2024-28157 - Stored XSS in Jenkins GitBucket Plugin GitBucket URL: javascript:alert77 3. Save, then visit the project page 4. Alert fires with 49 77 Screenshots are in poc/screenshots/ References NVD https://nvd.nist.gov/vuln/detail/CVE-2024-28157...

CVE-2025-55763

CVE-2025-55763 Desbordamiento de búfer en el analizador URI de CivetWeb 1.16 la última versión publicada hasta ahora. Código vulnerable El bloqueo ocurre aquí en src/civetweb.c durante el último strcat marcado. Corrección Vea el pull request. PoC El PoC bloquea el servidor realizando un...

Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

Spring Cloud Netflix Hystrix Dashboard prior to version 2.2.10 is susceptible to remote code execution. Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view...

vCenter Server - Improper Access Control

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed. id: CVE-2021-22017 info: name:...

Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

Nginx-CVE-2013-4547

Vulnerabilidad de lógica de nombre de archivo en Nginx CVE-2013-4547 Descripción de la vulnerabilidad Versiones afectadas: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Enlaces de referencia: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/...

ms-photos_NTLM_Leak

Microsoft ms-photos URI NTLM Leak New vulnerability allowing to leak NTLM hashes from browsers with one click By Ruben Enkaoua Description The Microsoft ms-photos URI scheme takes fileName as parameter, which can be submitted with a UNC path, leaking NTLMv2-SSP hashes one opened. By crafting a...

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi $ pip3 install apkleaks from Source Clone...

apkleaks

APKLeaks Escaneando archivo APK en busca de URIs, endpoints y secretos. Instalación desde PyPi desde el código fuente desde Docker Uso Opciones Salida Patrón Argumentos para descompilador Licencia Agradecimientos Instalación Es bastante sencillo instalar APKLeaks : desde PyPi $ pip3 install...

EUVD-2026-52744

@a2ui/webcore: openUrl permits javascript: URI execution via agent-supplied button actions...

GHSA-72QQ-P3R5-F7WQ @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Summary The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitra...

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Summary The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitra...