Lucene search
+L

289 matches found

Kitploit
Kitploit
added 2026/08/25 11:51 p.m.2 views

VHostScan

VHostScan ماسح مضيف افتراضي يمكن استخدامه مع أدوات المحور pivot tools، لكشف سيناريوهات catch-all، والأسماء المستعارة، والصفحات الافتراضية الديناميكية. تم تقديمه لأول مرة في SecTalks BNE في سبتمبر 2017 عرض الشرائح. هذه نسخة محسنة من أداة VHostScan الأصلية بواسطةCodingo مع تحسينات إضافية، تحديث قاع...

5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/25 7:52 p.m.2 views

gobuster

Gobuster 💻 مقدمة أداة تخمين Brute-forcing سريعة ومرنة مكتوبة بلغة Go Gobuster هي أداة تخمين عالية الأداء للأدلة/الملفات، DNS والمضيفات الافتراضية، مكتوبة بلغة Go. صُممت لتكون سريعة وموثوقة وسهلة الاستخدام لمحترفي الأمن واختبار الاختراق. ✨ الميزات 🚀 أداء عالي : مسح متعدد الخيوط مع تزامن قابل للتكو...

5.4AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 1:18 p.m.3 views

Mini_httpd-CVE-2018-18778

minihttpd任意ファイル読み取り脆弱性(CVE-2018-18778) Minihttpdは小型のHTTPサーバーであり、システムリソースの消費が少ない状態でも一定の性能(Apacheの約90%)を維持できるため、さまざまなIoT機器(ルーター、スイッチ、カメラなど)の組み込みサーバーとして広く使用されています。また、ファーウェイ、Zyxel、海康威視(Hikvision)、ラズベリーパイなどのベンダーのデバイスでもMinihttpdコンポーネントが採用されていました。...

6.5CVSS6.8AI score0.70791EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 9:44 a.m.2 views

vhostawesome

FunWithVhosts أداة مصممة للتحقق بكفاءة من المضيفات الافتراضية عبر عناوين IP متعددة. الوصف تقوم FunWithVhosts بأتمتة عملية تحديد المضيفات الافتراضية على عناوين IP معينة. يتحقق السكربت من المنافذ المفتوحة، خاصة منافذ خادم الويب، ثم يحاول استرداد المحتوى باستخدام قائمة بالنطاقات الفرعية المحتملة لنط...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/21 6:29 a.m.1 views

dnsresolver

dnsresolver Un Résolveur DNS Ultra-Rapide Table des matières Installation Utilisation Utilisation de base Résolution d'hôtes avec ports Énumération des hôtes virtuels Utilisation de domaines non résolus Utilisation de localhost Démonstrations Commentaires Licence Installation Assurez-vous que Rus...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/21 3:16 a.m.44 views

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

5.5AI score
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.19 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: vhost: The bound check for the vdpa group has been moved to vhostvdpa. Duplication has been eliminated by consolidating these changes. This reduces the possibility that a parent driver may miss these checks. Additionally, we...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 11:58 a.m.14 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple vulnerabilities due to Eclipse Jetty

Summary Eclipse Jetty is used by IBM Cloud Pak for Data System 1x to provide web application server functionality. CVE-2026-10051 affects Jetty's HTTP/1.1 request handling when trailers are retained across multiple requests on the same connection, potentially exposing sensitive information from...

7.5CVSS5.4AI score0.00429EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/05 1:55 p.m.8 views

CVE-2026-6790

A flaw was found in Eclipse Jetty. The server does not strictly validate that the request authority host and port matches the Host header provided in HTTP/1, HTTP/2, and HTTP/3 requests. This improper validation can lead to various issues, including incorrect handling of URI constructions for...

5.3CVSS5.5AI score0.0031EPSS
SaveExploits0References4
Fedora
Fedora
added 2026/07/30 1:00 a.m.9 views

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-13.fc43

Nginx virtual host traffic status module...

9.2CVSS5.8AI score0.04059EPSS
SaveExploits5
ATTACKERKB
ATTACKERKB
added 2026/07/28 2:30 p.m.10 views

CVE-2026-67178

MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-to-HTTPS redirect: Redirect permanent / https://misp.example Apache’s Redirect directive appends any portion of the requested path that follows the matched prefix to the configur...

7.8CVSS6AI score0.00493EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/07/23 1:21 a.m.12 views

[SECURITY] Fedora 44 Update: nginx-mod-vts-0.2.4-13.fc44

Nginx virtual host traffic status module...

9.2CVSS7.2AI score0.04059EPSS
SaveExploits5
Oracle linux
Oracle linux
added 2026/07/23 12:00 a.m.16 views

tomcat9 update

1:9.0.117-2 - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds 1:9.0.117-1 - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is...

7.5CVSS7.2AI score0.98616EPSS
SaveExploits9
Oracle linux
Oracle linux
added 2026/07/21 12:00 a.m.17 views

tomcat9 security update

1:9.0.117-2 - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds 1:9.0.117-1 - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is...

9.6CVSS7.9AI score0.98616EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
added 2026/07/17 12:00 a.m.10 views

RabbitMQ 3.7.x < 4.0.13 / 4.1.x < 4.1.2 XSS via Virtual Host Names

The version of RabbitMQ installed on the remote host is affected by a cross-site scripting vulnerability: - Unsanitized virtual host names allow for XSS in the management UI pages that list virtual hosts if the attacker manages to find a way to force a virtual host to restart. CVE-2026-44839 Note...

5.6CVSS5.8AI score0.0018EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-6790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host...

5.3CVSS5.5AI score0.0031EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/14 8:51 a.m.108 views

CVE-2026-6790

In Eclipse Jetty, HTTP/1 requests to HTTP/1.3 (HTTP/2/3 included) do not enforce that the request authority (host and port) matches the Host header when present. This mismatch can affect URI redirects, virtual host selection, reverse proxying, and logs. The issue is described across CVE sources (...

5.3CVSS6.1AI score0.0031EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/14 8:51 a.m.10 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.1AI score0.0031EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/14 8:51 a.m.15 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.1AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/10 8:24 p.m.15 views

CVE-2026-57221

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and...

5.3CVSS5.7AI score0.00471EPSS
SaveExploits1
Rows per page
Query Builder