CVE-2023-24329-PoC

CVE-2023-24329-PoC Un PoC breve e informativo sulla CVE-2023-24329: difetto di parsing di urllib in Python. root@kitploit: git clone https://github.com/H4R335HR/CVE-2023-24329-PoC cd CVE-2023-24329-PoC python3 CVE-2023-24329-PoC.py Basato sulla ricerca di Yebo Cao -...

CVE-2024-22243

CVE-2024-22243 Autor: Sean Pesce Este projeto contém um exemplo de aplicação web que demonstra cenários exploráveis para CVE-2024-22243, uma vulnerabilidade de análise de URL no Spring Framework do Java divulgação oficial aqui. Vulnerabilidade As versões afetadas do Spring analisam o "segmento...

CVE-2023-51385-

RCE tramite /.ssh/config insicuro L'uso di token come %h, %p in è piuttosto popolare per utilizzare tunnel e proxy di connessione tramite SSH.ProxyCommand Configurazione vulnerabile host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Nota: nella mia valutazione iniziale...

CVE-2020-5260

CVE-2020-5260 Registrazione dimostrativa di CVE-2020-5260 Quando git esegue un comando come "git clone https://example.com", richiede di memorizzare le credenziali per l'host "example.com" con il protocollo "https" e, quando l'endpoint remoto richiede l'autenticazione, aggiunge le credenziali...

cve-2020-5260

cve-2020-5260 Un endpoint PoC HTTP per cve-2020-5260 che può essere distribuito su Heroku INFORMAZIONI SUI CREDITI Felix Wilhelm di Google Project Zero https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 Attiva la vulnerabilità root@kitploit: git clone...

Airachnid-Burp-Extension

Estensione Burp per Web Cache Deception Un'estensione Burp per testare le applicazioni per la vulnerabilità all'attacco Web Cache Deception. Una volta caricata l'estensione, è possibile accedervi nella scheda Target - Sitemap e fare clic con il tasto destro sulla risorsa da testare. Verrà mostrat...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Crediti L'impatto della vulnerabilità è al momento limitato, ma grazie a https://x.com/chudyPB per aver fornito un'idea intelligente di bypass. https://x.com/chudyPB...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough Ein vollständiger Walkthrough für TryHackMes Raum „Moniker Link“: die Ausnutzung von CVE-2024-21413, einer Microsoft-Outlook-Sicherheitslücke aus dem Jahr 2024, um den NTLMv2-Hash eines Opfers zu stehlen, sobald es auf einen Link in einer...

EUVD-2026-65697

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

bypass-url-parser

Bypass Url Parser Strumento che testa MOLTI bypass di URL per raggiungere una pagina protetta 40X. Se ti stai chiedendo perché questo codice non è nient'altro che un wrapper sporco di curl, ecco il motivo: La maggior parte delle richieste Python fa encoding/decoding di url/path/parametri, e lo...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

CVE-2023-41080

vulnerabile: http://localhost:8081//secret.html;@example.com Reindirizzamento a un sito web arbitrario in questo caso, https://example.com. corretto: http://localhost:8082//secret.html;@example.com rif: https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...

Zeus-Scanner

Annuaire des liens utiles Qu'estce que Zeus Les caractéristiques de Zeus Exigences et installation Ubuntu/Debian centOS autre Capturesécran vidéo Demo manuel d'utilisation Comment fonctionne Zeus Fonctionnalité Passant drapeaux sqlmap avec Zeus Informations légales Licence GPL Code de conduite...

unfurl

unfurl Estrai le parti degli URL forniti su stdin Installazione Se hai Go installato e configurato: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest Altrimenti scarica l'ultimo binario per la tua piattaforma, estrailo e spostalo da qualche parte nel tuo $PATH es. /usr/bin/:...

Linux Distros Unpatched Vulnerability : CVE-2026-55185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Miniflux 2 is an open source feed reader. Prior to 2.3.1, IsRelativePath in internal/urllib/url.go accepts redirect targets containing backslashes because Go UR...

CVE-2026-50288

CVE-2026-50288 affects @asymmetric-effort/specifyjs , a declarative TypeScript UI framework, prior to version 0.2.136 . The vulnerability resides in the assertSecureUrl function (core/src/shared/secure-fetch.ts:42-45). When new URL() throws a parse error, the catch block silently returned instead...

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

CVE-2026-75628

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

PT-2026-79057

WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response. make location absolute in src/webob/response.py checks a Location value for a URI scheme or leading double slash before urllib.parse.urljoin strips leading C0 control characters and spaces. An attacker-controlled...

CVE-2026-16221

A flaw was found in fast-uri. This vulnerability arises because fast-uri does not correctly interpret backslash characters as authority delimiters in Uniform Resource Locators URLs, unlike Node.js's native WHATWG URL parser. This discrepancy can cause applications that use fast-uri for security...