Zuul Panel - Detect

ZUUL panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZUUL panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zuul Panel - Detect', 'description': 'ZUUL panel was detected.', 'author'...

enos (>=4.3.0a0, <=5.0.1), enos-kubernetes (>=0.0.1, <=1.0.5) +3 more potentially affected by CVE-2025-14010 via ansible (2.5.15)

ansible PYPI version 2.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =4.3.0a0, =0.0.1, =1.3.0rc1, =4.0.0.0rc1, =3.1.0, =3.6.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

enos (>=4.3.0a0, <=5.0.1), enos-kubernetes (>=0.0.1, <=1.0.5) +3 more potentially affected by CVE-2023-5115 via ansible (2.5.15)

ansible PYPI version 2.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =4.3.0a0, =0.0.1, =1.3.0rc1, =4.0.0.0rc1, =3.1.0, =3.6.1 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) +10 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.5.release)

org.springframework:spring-websocket MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.5 -...

CVE-2021-22113

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) +10 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.5.release)

org.springframework:spring-websocket MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.5 -...

EUVD-2021-1208

Malware in sbrugna...

EUVD-2018-4517

Malware in sbrugna...

com.github.rebue.jwt:jwt-svr (1.1.0), com.github.rebue.scx:zuul-server (1.1.0) +1 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (7.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.rebue.jwt:jwt-svr 1.1.0 - com.github.rebue.scx:zuul-server 1.1.0 -...

com.github.rebue.jwt:jwt-svr (1.1.0), com.github.rebue.scx:zuul-server (1.1.0) +1 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (7.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.rebue.jwt:jwt-svr 1.1.0 - com.github.rebue.scx:zuul-server 1.1.0 -...

ara (>=0.14.3.0rc1, <=0.14.3), kayobe (>=3.1.2, <=3.1.3) +2 more potentially affected by CVE-2023-5115 via ansible (2.3.3.0)

ansible PYPI version 2.3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ara =0.14.3.0rc1, =3.1.2, =3.0.0, =3.0.3 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...

Incorrect Authorization in Spring Cloud Netflix Zuul

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.microservices:cloud-altemistafwk-core-microservices-gateway-conf (3.1.0.release) +77 more potentially affected by CVE-2021-22113 via org.springframework.cloud:spring-cloud-netflix-zuul (>=2.0.0.release, <=2.2.6.release)

org.springframework.cloud:spring-cloud-netflix-zuul MAVEN version =2.0.0.release, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =1.0.0, =1.6.8-safe-jdk8 and more Source cves: CVE-2021-22113 Source advisory: GHSA-VWPG-F6GW-RJVFhttps://vulners.com/github/GHSA-VWPG-F6GW-RJVF...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.microservices:cloud-altemistafwk-core-microservices-gateway-conf (3.1.0.release) +77 more potentially affected by CVE-2021-22113 via org.springframework.cloud:spring-cloud-netflix-zuul (>=2.0.0.release, <=2.2.6.release)

org.springframework.cloud:spring-cloud-netflix-zuul MAVEN version =2.0.0.release, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =1.0.0, =1.6.8-safe-jdk8 and more Source cves: CVE-2021-22113 Source advisory: OSV:GHSA-VWPG-F6GW-RJVFhttps://vulners.com/osvghsa/OSV:GHSA-VWPG...

Possible request smuggling in HTTP/2 due missing validation

Impact If a Content-Length header is present in the original HTTP/2 request, the field is not validated by Http2MultiplexHandler as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the...

CVE-2021-22113

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...

CVE-2021-22113

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...

Design/Logic Flaw

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...

CVE-2021-22113

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...

CVE-2021-22113

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall...