CVE-2025-27415-PoC

CVE-2025-27415 PoC Nuxt3 cache poisoning A repository for setting up the cache poisoning vulnerability environment that occurs in nuxt3 =3.0.0 3.16.0 Vulnerability Summary When a CDN is placed in front of a Nuxt server, and the CDN only stores the path excluding URL queries as the cache key, a...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions root@kitploit: Next.js...

NextSecureScan

NextSecureScan - Next.js-CVE-2025-29927 Middleware Vulnerability Scanner NextSecureScan is a comprehensive security scanner specifically designed to identify middleware-related authorization bypass vulnerabilities CVE-2025-29927 in Next.js applications. This scanner leverages explicit header...

Sercomm VD625 Smart Modems - CRLF Injection

Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT2.1.0 are vulnerable to Carriage Return Line Feed CRLF injection via the Content-Disposition header. id: CVE-2021-27132 info: name: Sercomm VD625 Smart Modems - CRLF Injection author: geeknik severity: critical description: Sercomm...

dnspooq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 For educational purposes only Requirements Docker compose Docker Exploit Launch containers root@kitploit: $ docker-compose up -d Run exploit.py root@kitploit: $ docker-compose exec attacker bash bash-5.0...

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner WCVS es un escáner CLI rápido y versátil para envenenamiento de caché web y decepción de caché web, desarrollado por Hackmanit y Maximilian Hildebrand. El escáner admite muchas técnicas diferentes de envenenamiento de caché web y decepción de caché web, incluye un...

arp-dns-attacks

ARP-DNS attacks Using PCAP library in Linux for Windows, it would be Winpcap 1. The two attacks demonstrated here can be used to poison a victim's ARP cache with which we can sniff/manipulate the packets transmitted between the victim and the local gateway. Please note that these attacks are mean...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

param-miner

param-miner Esta extensión identifica parámetros ocultos y no vinculados. Es particularmente útil para encontrar vulnerabilidades de envenenamiento de caché web. Combina la lógica avanzada de diferenciación de Backslash Powered Scanner con una técnica de búsqueda binaria para adivinar hasta 65,00...

fockcache

fockcache FockCache - Envenenamiento de caché de prueba minimizado Detalle del envenenamiento de caché: https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache intenta realizar envenenamiento de caché probando las cabeceras X-Forwarded-Host y X-Forwarded-Scheme en págin...

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

POC-CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass PoC Overview This PoC demonstrates CVE-2025-29927, a vulnerability in Next.js middleware that allows attackers to bypass authentication, authorization, and CSP mechanisms using the x-middleware-subrequest header. Affected Versions Next.js versions 11.1.4 ...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 What is the vulnerability about? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request...

CVE-2026-101904

A flaw was found in Axios. If a separate vulnerability modifies shared object properties prototype pollution in the application environment, Axios may inherit those properties when processing request configurations rebuilt without explicit headers. An attacker can exploit this condition to inject...

CVE-2021-33026

CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...

CVE-2024-46982

Next.js Cache Poisoning Exploit This tool automates the detection and exploitation of CVE-2024-46982 , a cache poisoning vulnerability in Next.js , where Server-Side Rendering SSR responses can be incorrectly cached as Static Site Generation SSG. This misconfiguration can lead to Stored XSS, DoS,...