docker_CVE-2014-6271.

dockerCVE-2014-6271. 1. docker build -t DOCKERIMAGENAME /path/to/dockerfiledirectory 2. docker run -it -d -p 8080:80 DOCKERIMAGENAME 3. verify execution with: docker ps 4. verify web server execution: http://localhost:8080 5. exploit vulnerability : curl -H "user-agent: :; ; echo; echo; /bin/bash...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service

CVE-2021-44228 Spring Boot Test Service This is a dirty hack spring boot hello world proejct to test your tooling/payloads/detection capabilities locally before you hit production targets with them. The configured Log4j version is 2.13.0 Building the docker image root@kitploit: bash build.sh...

vaas-cve-2014-6271

Vulnerabilidad como Servicio - CVE 2014-6271 Un sistema Debian Buster Linux con una versión vulnerable de bash y una aplicación web para mostrar CVS-2014-6271, también conocido como Shellshock. Resumen Este contenedor Docker está basado en Debian Buster y ha sido modificado para usar una versión...

vaas-cve-2014-6271

Vulnerability as a Service - CVE 2014-6271 A Debian Buster Linux system with a vulnerable version of bash and a web application to showcase CVS-2014-6271, a.k.a. Shellshock. Overview This docker container is based on Debian Buster and has been modified to use a vulernable version of Bash...

CVE-2026-54806

WP Activity Log Inyección de Objetos PHP CVE-2026-54806 PoC 📜 Descripción CVE-2026-54806 es una vulnerabilidad crítica CVSS 9.8 de inyección de objetos PHP sin autenticar en el plugin WP Activity Log de WordPress wp-security-audit-log de Melapress. Un atacante no autenticado puede inyectar objeto...

CVE-2025-9816

CVE-2025-9816 XSS Almacenado en el Plugin WP-Statistics Escáner Detección y PoC "El plugin WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del encabezado User-Agent en todas las versiones hasta, e incluyend...

CVE-2024-46982-Reproduction

Getting Started 1. Install Node.js LTS 2. npm install 3. npm run build 4. npm run start Exploitation 1: Stored XSS via Cache Poisoning 1. Send the following HTTP request Attack Request using any HTTP client. root@kitploit: GET /poc?nextDataReq=1 HTTP/1.1 Host: localhost:3000 User-Agent: alert'XSS...

CVE-2024-50395

CVE-2024-50395 CVE Info An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version:...

CVE-2026-76564

Stored XSS via User-Agent in Admin Order View in PhocaCart PhocaCart ≤ 6.1.7 — Unauthenticated Attacker Stores XSS Payload via Checkout. Executes in Admin Browser Context SUMMARY PhocaCart 6.1.7 for Joomla stores the raw HTTP User-Agent header from checkout requests in the orders database table...

log4shell-cve-lab

Log4Shell CVE-2021-44228 lab This repository contains a small vulnerable Log4j 2.14.1 HTTP service for CVE-2021-44228. Sentinel reproduced this scenario on 2026-08-27 as a from-scratch sandbox lab. The important properties from that run are preserved here: attacker-controlled User-Agent reaches a...

CVE-2026-86186 AVideo API Rate Limit Bypass via Bot User-Agent Header

AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection. Attackers can send requests with a bot User-Agent to disable rate limiting and perform unlimited password guessing...

CVE-2026-86186

AVideo is a video hosting platform whose API rate-limiting mechanism fails to account for requests carrying a bot User-Agent header . This allows an unauthenticated attacker to bypass all eight protected operations , including login brute-force protection , by simply setting a bot User-Agent stri...

CVE-2026-86186 AVideo API Rate Limit Bypass via Bot User-Agent Header

AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection. Attackers can send requests with a bot User-Agent to disable rate limiting and perform unlimited password guessing...

CVE-2021-44228

CVE-2021-44228 Using Log4j 2.14 library Vulnerable in User-Agent, POST method and entrypoint /admin/cores?foo= I have uploaded it in Docker Hub: you can pull and run it https://hub.docker.com/repository/docker/iamnewbie/log4j-vuln...

php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

CVE-2026-84479

WWBN AVideo (version e01e41ecc and earlier) contains an authentication bypass vulnerability where three login-time security controls rely solely on the client-supplied User-Agent header. The isAVideoEncoder() and isAVideoMobileApp() checks match HTTP_USER_AGENT against hardcoded literals ("AVideo...

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

PT-2026-84538

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions e01e41ecc and earlier Description Three security controls during the login process rely exclusively on the client-supplied User-Agent header. The functions isAVideoEncoder and isAVideoMobileApp compare the HTTP USER AGENT...

CVE-2026-82644 WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent

WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...