php-app-race-condition

存在漏洞的 PHP 应用（竞态条件） 环境搭建: root@kitploit: docker-compose up 环境验证: 连接测试: http://localhost/test.php 漏洞端点: http://localhost/poc.php 竞态条件利用: root@kitploit: echo http://localhost | nuclei -t race.yml 可以观察到，从余额中提取的金额少于 1280$（10$ 128 个请求），并伴有可变的净收益。...

strutser

strutser 此程序用于检测CVE-2017-5638漏洞。 使用方法 root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP requests. default 1...

padding-oracle-attacker

padding-oracle-attacker Herramienta CLI y biblioteca para ejecutar ataques de oracle de relleno fácilmente, con soporte para peticiones de red concurrentes y una interfaz de usuario elegante. Instalación Asegúrate de tener Node.js instalado, luego ejecuta root@kitploit: $ npm install --global...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

CVE-2024-53476

CVE-2024-53476 描述 SimplCommerce 的结账逻辑存在竞争条件漏洞，允许多个用户通过同时发送结账请求购买超过库存数量的商品。 检测方法 攻击者可以通过使用两个账户，在几乎同一时间尝试购买库存稀缺的商品（库存=1）来检测此漏洞。如果两个账户都成功购买了该商品，则确认存在竞争条件。这可以通过自定义脚本或 Burp Suite Turbo Intruder 发送并发结账请求来实现。 测试于 230310c8d7a0408569b292c5a805c459d47a1d8f 提交 链接 https://www.simplcommerce.com/...

CVE-2026-36958

CVE-2026-36958：通过并发 HTTP 请求导致的拒绝服务 CVE ID： CVE-2026-36958 日期： 2026-04-29 发现者： Kirubel Solomne 厂商： U-SPEED 产品： U-SPEED 路由器 固件版本： V1.0.0 CWE： CWE-400 - 未受控制的资源消耗 描述 U-SPEED 路由器固件 V1.0.0 存在拒绝服务漏洞。攻击者通过向 Web 管理界面发送大量并发 HTTP 请求到随机或不存在的端点，可耗尽嵌入式 Boa HTTP 服务器中的系统资源。这会导致路由器 Web 界面无响应，可能需要手动重启才能恢复正常运行。 CV...

CVE-2021-41773

Uso root@kitploit: usage: main.py -h -f FILE -s N --timeout SECONDS optional arguments: -h, --help show this help message and exit -f FILE, --file FILE File containing target URLs one per line -s N, --semaphore N Concurrent requests default: 10 --timeout SECONDS Request timeout in seconds default...

CVE-2026-55784

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

GHSA-334Q-H5G3-FPXV free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

EUVD-2026-68016

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

CVE-2026-55784

free5GC is an open-source 5G core network implementation. In versions 1.4.4 and earlier , the AUSF component stores per-subscriber authentication state in a global sync.Map keyed only by SUPI . Because each request unconditionally replaces the active context for that SUPI, an attacker with access...

CVE-2026-82258

SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. Attackers can exploit specific timing conditions to access sensitive data from other users' concurrent requests...

EUVD-2026-67584

SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. Attackers can exploit specific timing conditions to access sensitive data from other users' concurrent requests...

CVE-2026-82258

SvelteKit versions from 2.38.0 up to (but not including) 2.60.1 are affected by a race condition in the query.batch feature. Under specific timing conditions, concurrent requests from different users can merge under a single request context, allowing an attacker to access sensitive data from othe...

EUVD-2026-67690

filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation...

PT-2026-83369

Name of the Vulnerable Software and Affected Versions free5GC versions 1.4.4 and earlier Description The AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool within internal/context/context.go, using only the SUPI as a key. Requests processed by...

CVE-2026-59324

When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...

Apache Struts < 7.3.0 Multiple Vulnerabilities (S2-070) (S2-071)

The version of Apache Struts installed on the remote host is 7.2.1. It is, therefore, affected by multiple vulnerabilities in the JSON plugin, as referenced in the S2-070 and S2-071 advisories: - A component of the JSON plugin that holds per-request parsing state could be shared between concurren...

EUVD-2026-62712

Race condition in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state...