1418 matches found
CVE-2021-38647-POC-and-Demo-environment
Detalles OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, anteriormente conocido como NanoWBEM es un servidor de gestión de código abierto del Modelo de Interfaz Común CMI de Microsoft y The Open Group. OMI es un agente de software presente en la mayoría de las máquinas virtuales Linux...
Project-CVE-2015-1635
CVE-2015-1635 CVE-2015-1635,MS15-034 Detección de vulnerabilidad USAGE python MS15-034.py www.xxx.com:80 Programa de prueba Vulnerabilidad de ejecución remota de código en HTTP.sys CVE-2015-1635, MS15-034 La vulnerabilidad de ejecución remota de código existe en la pila de protocolos HTTP HTTP.sy...
CVE-2022-2414-Proof-Of-Concept
CVE-2022-2414-Proof-Of-Concept A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...
nginx security update
An update is available for nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a foc...
RHEL 9 : nginx (RHSA-2026:66542)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66542 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...
AlmaLinux 9 : nginx (ALSA-2026:66542)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...
CVE-2025-0108-Authentication-Bypass-checker
Esta herramienta comprueba si un dispositivo PAN-OS objetivo es vulnerable a la vulnerabilidad de omisión de autenticación CVE-2025-0108. Envía una solicitud HTTP manipulada al objetivo y analiza la respuesta para determinar si el dispositivo es explotable. Uso IP única root@kitploit: python...
CVE-2020-5902-Vuln-Checker
Comprobador de Vulnerabilidad CVE-2020-5902 Mientras investigábamos la vulnerabilidad con otros investigadores, se nos ocurrió que la mayoría de las formas actuales de probar la vulnerabilidad pueden considerarse una forma de compromiso del sistema. Queríamos desarrollar una forma de probar la...
CVE-2026-9336
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...
EUVD-2026-75677
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...
CVE-2026-21962
🚨 CVE-2026-21962 - Vulnerabilidad Crítica de Omisión de Autenticación 🧾 Resumen 🔥 Una vulnerabilidad de severidad máxima 10.0 que permite acceso remoto sin autenticación a sistemas middleware de Oracle. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...
Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-
Exploitation of Remote Code Execution Vulnerability CVE-2024-7954 Software Vulnerability Testing Project Submitted by: Shivansh Kuntal Overview This project demonstrates the exploitation of CVE-2024-7954 , a critical Remote Code Execution RCE vulnerability affecting SPIP CMS through its porteplum...
CVE-2026-23744-Remote-Code-Execution-POC
CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Run the exploit root@kitploit: python3 exploit.py...
CVE-2026-79522
An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...
westone-CVE-2020-14883-scanner
westone-CVE-2020-14883-scanner Un atacante remoto puede construir una solicitud HTTP especial para tomar el control de la Consola del Servidor WebLogic sin autenticación. Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner c...
CVE-2026-79522
An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...
EUVD-2026-75166
An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...
CVE-2026-79522
GPAC v26.07.0 contains an out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c), which can be triggered by sending a crafted HTTP request, leading to a Denial of Service . The CVSS 3.1 score is 6.5 (Medium) , with a network attack vector, low complexity, no privileges r...
CVE-2026-26084
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...
