15516 matches found
CVE-2026-23744-poc
CVE-2026-23744 — mcpJam 远程代码执行（RCE）漏洞利用程序 一个针对 CVE-2026-23744 的 Python 3 概念验证（Proof-of-Concept）漏洞利用程序，该漏洞是影响 mcpJam v1.4.2 的任意命令执行漏洞。 该工具通过在传输前将命令透明地 Base64 编码来自动化载荷传递，有助于绕过严格的输入验证和字符过滤机制。载荷在目标系统上通过 /bin/bash 包装器进行解码并执行。 功能特性 自动 Base64 载荷编码 命令在传输前会被自动编码，在针对强制实施严格输入验证或字符限制的应用程序时，可提高可靠性。 灵活的命令执行...
CVE-2024-38473
Apache HTTP Server 中 modproxy 编码问题的概念验证 PoC 该仓库包含用于演示 Apache HTTP Server 2.4.59 及更早版本中 modproxy 模块编码问题的概念验证 PoC 脚本。此漏洞允许将编码不正确的请求 URL 发送到后端服务，从而可能通过精心构造的请求绕过身份验证。 目录 漏洞描述 设置与使用 重要注意事项 缓解措施 漏洞描述 CVE-ID ： 待定 概述 ： Apache HTTP Server 2.4.59 及更早版本中 modproxy 模块的编码问题允许将编码不正确的请求 URL...
recipe-blog-encoding
recipe-blog-encoding !WARNING 本项目完全是通过 氛围编码（vibe-coded） 完成的（可能部分内容剽窃自这个仓库），作者是个 小傻瓜 ，只是觉得这个点子很有趣 利用优化搜索引擎排名（SEO）的菜谱前言作为载体，隐藏编码后的秘密信息（实际上提示词可以是任意内容，共享的提示词只是编码器和解码器约定的密钥）。 使用神经语言学隐写术将秘密信息隐藏在看起来自然的文本中。 工作原理 1. 编码器接收你的秘密信息和共享提示词。 2. 在每个生成步骤中，它构建模型 top-k 令牌的概率分布（CDF）。 3...
Imperva_gzip_bypass
Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit 针对MS HTTP协议栈RCE漏洞（CVE-2021-31166）的利用程序 精心构造的HTTP请求指向存在漏洞的Windows版本将导致DOS攻击。服务器将以蓝屏错误重启。 Http.sys是Windows内核驱动程序，负责处理HTTP请求并构造响应。 此存在漏洞的http.sys驱动程序无法处理特制的"Accept-Encoding"头部，导致崩溃，进而服务器重启。 在蓝屏上，我们可以看到错误信息"停止代码: KERNEL SECURITY CHECK FAILED" 这是一个严重漏洞，CVSS评分为9.8，易于利用。...
cve-2023-23397
CVE-2023-23397 此脚本允许创建 TNEF 编码的 Outlook 电子邮件，其中包含 CVE-2023-23397 漏洞利用载荷，并通过纯 SMTP 发送——无需 COM 对象或 EWS。 我未能让 IPM.Schedule.Meeting.Request 消息类正常工作（它同时生成了会议和提醒，但出于某种原因不遵守 PidLidReminderOverride 属性），因此该脚本滥用了 IPM.TaskRequest 类。这会产生一个恶意的会议提醒弹出窗口，就像原始漏洞利用一样，但收件人无法查看消息正文或会议详情。而在 OWA 中，该电子邮件看起来就像一封没有约会的普通消...
servu-cve-2026-28318-poc
CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" pre-auth crash Root-cause analysis + DoS proof-of-concept. The public advisory classifies this as an unauthenticated denial-of-service / uncontrolled resource consumption. Binary analysis shows the underlying defect is memory-safety :...
Astra Linux – Vulnerability in Python-Django
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads with Content-Transfer-Encoding: base64, including excessive whitespace. Earlier, unsupported Django versions such a...
Astra Linux – Vulnerability in Squid
Squid encounters issues with the improper handling of ASN.1 encoding for long SNMP OIDs in version 7.1. This issue occurs in the asnbuildobjid function within lib/snmplib/asn1.c...
Astra Linux – Vulnerability in Firefox and Thunderbird
When a user clicks on an FTP URL containing encoded newline characters %0A and %0D, these newline characters are interpreted as such, allowing arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodechoice In decodechoice, the boundary check before getlen uses the variable len, which remains 0 after initialization at the beginning of the function: unsigned int type, ext, len ...
Astra Linux – Vulnerability in aspell
The libaspell.a file in GNU Aspell before version 0.60.8 has a buffer overflow issue for strings that end with a single '\0' byte. This issue occurs when the encoding is set to ucs-2 or ucs-4 outside of the application, as indicated by the ASPELLCONF environment variable...
Astra Linux – Vulnerability in Thunderbird, Firefox
When encoding data from an inputStream in xpcom, the size of the input being encoded was not correctly calculated, potentially leading to an out-of-bounds memory write. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...
Astra Linux – Vulnerability in glibc
The iconv feature in the GNU C Library also known as glibc or libc6, up to version 2.32, may have a buffer over-read issue when processing invalid multi-byte input sequences in the EUC-KR encoding...
Astra Linux – Vulnerability in JRuby
A vulnerability was discovered in Ruby versions 2.5.8, 2.6.x up to 2.6.6, and 2.7.x up to 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, did not rigorously check the transfer-encoding header value. An attacker could potentially exploit this vulnerability to bypass a reverse proxy which...
Explotacion-CVE-2023-32315-Openfire
🔍 CVE-2023-32315 描述： CVE-2023-32315 漏洞影响 Openfire 服务器，允许攻击者在没有有效凭据的情况下绕过 Web 管理面板的登录。 该漏洞利用会添加一个管理员用户，使攻击者能够上传恶意插件并获得 Web shell。 ⚙️ 工作原理 CVE-2023-32315 是 Openfire 中的一个漏洞，允许访问初始配置向导的 JSP（/setup/setup-s/...） 即使在配置完成后仍可访问，其利用了对路径验证不严的问题，通过使用 Unicode/"best-fit" 编码（%u002e%u002e，等同于...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
Important: Red Hat Security Advisory: rhc-worker-script security update
An update for rhc-worker-script is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
python-paddingoracle
python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...