dnspython

dnspython INTRODUCTION dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG-authenticated messages and EDNS0. dnspython provides both high- and low-level access to DNS. The high-level classes...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow는 비동기non-blocking IO 기반의 Java 웹 서버입니다. 다음과 같은 몇 가지 다른 부분으로 구성됩니다: 동기blocking 및 비동기non-blocking IO를 모두 지원하는 코어 HTTP 서버 Servlet 3.1 구현 JSR-356 호환 웹 소켓 구현 Website: http://undertow.io Issues: https://issues.jboss.org/browse/UNDERTOW Project Lead: Stuart Douglas [email protected]...

CVE-2025-34100-demo

CVE-2025-34100-demo デモWebサーバー !NOTE これはあくまでWebサイトのPHPファイルであり、CVEをより理解し、より効果的なPoCを作成するには、https://nvd.nist.gov/vuln/detail/CVE-2025-34100 を参照してください。 これらのファイル自体はCVEを引き起こしませんが、CVEを悪用するためのエントリポイントです。CVEはCMS内に存在します。 ファイルは次のように配置してください： /var/www/html/biteinstall/ ├── index.php ├── pages │ ├── about.php...

CVE-2014-6271

CVE-2014-6271 사용법 go run CVE-2014-6271.go www.example.com 80 whoami...

CVE-2024-38475

CVE-2024-38475 CVE-2024-38475modrewrite 파일시스템 경로 매칭 취약점를 이용한 익스플로잇 이 저장소는 웹 서버 취약점 테스트를 위한 Python 스크립트를 포함하며, 특히 Apache 서버를 대상으로 합니다. 이 스크립트는 디렉토리 및 파일용 워드리스트를 사용하여 노출된 소스 코드에 대한 잠재적 문제modrewrite 파일시스템 경로 매칭 취약점를 확인하고 다양한 페이로드를 적용합니다. 사용법: 스크립트를 실행하려면 다음 명령어를 사용하세요: python3 script.py --webroots...

CVE-2021-41773

CVE-2021-41773 Apache 2.4.49 におけるパストラバーサル（Path Traversal）の脆弱性 この問題は Apache 2.4.49 にのみ影響し、それ以前のバージョンには影響しません。 詳細情報 https://pentesterguruji-notes.notion.site/CVE-2021-41733-f58b52f484b94671b319c107ac2739bf...

caddy v2.11.7

a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help Powered by Special thanks to: Warp, built for coding with multiple AI agents Available for MacOS, Linux, & Windows Menu Features Install Build from source For...

CVE-2026-104610

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

EUVD-2026-91570

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-104610

A stack-based buffer overflow vulnerability exists in the Boa Web Server component of Tenda HG7, HG9, and HG10 (300001138_en_xpon) devices. The issue is triggered by manipulating the Ethtype argument within the boaGetVar function of the /boaform/formLoopBack file. This vulnerability can be exploi...

CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-104610: Stack-based Buffer Overflow

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

PT-2026-104299

Name of the Vulnerable Software and Affected Versions Tenda HG7 affected versions not specified Tenda HG9 affected versions not specified Tenda HG10 300001138 en xpon affected versions not specified Description A stack-based buffer overflow occurs in the Boa Web Server component due to improper...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.5 release and security update

Red Hat JBoss Web Server 6.2.5 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.5 release and security update

Red Hat JBoss Web Server 6.2.5 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.2.5 (RHSA-2026:73981)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73981 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...

CVE-2026-55094 Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...

CVE-2026-55094 Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...

CVE-2026-55094

Taskcluster, a task execution framework used by Mozilla, is vulnerable to unauthenticated remote code execution (RCE) in versions prior to 100.3.0 . The vulnerability exists in the web-server component when an anonymous role is present that exposes the GraphQL endpoint . Specifically, the applica...