ffufPostprocessing

Ffuf: Post processing Unfortunately - despite its "-ac" flag, ffuf tends to produce a lot of irrelevant entries. This is why I've created a post-processing tool to filter out those entries. Additionally, I saw a lot of relevant entries removed when "-ac" was used - especially when ffuf encounters...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

CVE-2023-46442_POC

CVE-2023-46442POC Environment: Java 8 POC for CVE-2023-46442, Denial of Service vulnerability found within Soot before 4.4.1 under Java 8 When retrieving the body of a maliciously crafted method, a very small size class file or method can cause huge resource consumption and loop forever until a...

ci_fuzz

Description: This script fuzz's for Command Injection vulnerabilities resulting in remote command execution. Similiar OWASP vulnerablities are explained here -- https://www.owasp.org/index.php/CommandInjection The script will attempt to execute OS commands by injecting into every value in the bod...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

CVE-2026-129169

PMail versions 2.5.0 through 2.9.8 are vulnerable to a stored cross-site scripting (XSS) vulnerability via the /api/email/send endpoint. The root cause is the processing of unsanitized HTML in the email body, which allows authenticated users to inject malicious scripts. These scripts can execute ...

CVE-2026-129169 PMail 2.5.0 through 2.9.8 Stored XSS via /api/email/send HTML Body

PMail 2.5.0 through 2.9.8 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by sending unsanitized HTML through /api/email/send. Attackers can embed event-handler payloads like img onerror that execute when administrators view the message,...

log-add-http-post-bodies

Add POST body excerpt to the HTTP log This script gives analysts the ability to peek into what is being sent in HTTP POST bodies. It provides this by simply extending the HTTP log. Installation :: zkg refresh zkg install corelight/log-add-http-post-bodies Usage The HTTP log will have a new field...

CVE-2026-73857

A flaw was found in ModSecurity. When XML request body argument parsing is enabled, processing certain XML elements leaves an internal pointer uninitialized. A remote, unauthenticated attacker can exploit this flaw by sending a specially crafted HTTP request containing an XML payload. This causes...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

CVE-2025-1974

README Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1. Change the ip in shell.c 2. Check the docker is available and run make shell.so. We need to build so in alpine to make sure it can works in...

POC-CVE-2022-26671

If you got here, you know why this repo needed created. CVE-2022-26671 GET /AT/ATDefault.aspx Line's 430 contains the cleartext credential. secom | supervisor In regards to to responsible disclosure, not dislcosing a hardcoded cleartext HTTP body response is silly when its the login page./...

PentagridResponseOverview

PentagridResponseOverview Response Overview Extension for BurpSuite Author: Tobias "floyd" Ospelt, @floydch, http://www.floyd.ch Pentagrid AG, https://www.pentagrid.ch Find exotic responses by grouping response bodies response overview This extension groups all response bodies by similarity and...

CVE-2019-17564

CVE-2019-17564: Apache Dubbo Deserialization Vulnerability 0x00 Introduction Apache Dubbo is a high-performance, lightweight open-source Java RPC framework. It provides three core capabilities: interface-based remote method invocation, intelligent fault tolerance and load balancing, and automatic...

gitread

gitread PoC for CVE-2026-85706, an unauthenticated arbitrary file read affecting self-managed GitLab CE/EE. | ---|--- CVE| CVE-2026-85706 CVSS| 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Affected| 18.7 to 19.1.7, 19.2.0 to 19.2.5, 19.3.0 to 19.3.1 Fixed| 19.1.8 / 19.2.6 / 19.3.2 released 2026-09-10...

CVE-2025-28009

CVE-2025-28009 - SQL Injection in Dietiqa App v1.0.20 Discovered by: Saharuddin Azman Vendor: Appventure Sdn Bhd Product: Dietiqa App Version Affected: v1.0.20 CVE ID: CVE-2025-28009 Vulnerability Type: SQL Injection 📝 Description A SQL Injection vulnerability exists in the u parameter of the...

CVE-2026-123864

A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections, including TLS private keys and other users' requests. TLSWrap::DoWrite calls ClearOut directly when asked to write zero bytes; if that write is issued from JavaScript running inside the...

CVE-2025-0994

CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...

gitea-artifact-v4-readall

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitea-artifact-v4-readall Write-up: https://abraxaslabs.tech/research/gitea-artifact-v4-readall gitea-artifact-v4-readall Gitea 1.27.3 - Gitea jobsummary.go already caps at MaxJobSummarySize 1 MiB with io.LimitReader...