CVE-2023-28218

تقرير CVE-2023-28218 نظرة عامة على الخطأ خطأ يؤدي إلى تصعيد الامتيازات في نواة Windows. يظهر الخطأ في برنامج التشغيل Windows Ancrillary Function Driver for WinSock AFD.sys. تم إصدار الإصلاح في تحديث 11/04/2023. تبلغ نقاطه CVSS:3.1 7.0 / 6.1 ويُقيَّم بأنه Important. وصف الخطأ نوع الخطأ: Double fet...

CVE-2022-32932

CVE-2022-32932 : scrittura OOB in ZinComputeProgramUpdateMutables dovuta a un problema di double fetch Commento dell'autore CVE-2022-32932 è un'altra vulnerabilità che ho scoperto nell'interfaccia kernel ANE; si tratta di un problema di double fetch che ha portato a un'interessante scrittura OOB...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

halo-cve-2026-67919

halo plugin rce da un URL La console di halo consente agli amministratori di installare e aggiornare plugin incollando un URL. Recupera qualsiasi URL, installa il jar e il codice del jar viene eseguito sul server. Nessun controllo sullo schema, nessun controllo sull'host, i redirect vengono...

CVE-2026-80347 mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets

mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://::1/ yields the bracketed string, and then tests it with net.isIP. That call returns zero for a...

CVE-2026-80347

mcp-fetch (npm package @kazuph/mcp-fetch ) through version 1.6.3 contains a Server-Side Request Forgery (SSRF) flaw in its isSafeUrl guard. When a target URL uses an IPv6 literal such as http://[::1]/, the parsed hostname retains the surrounding brackets. The net.isIP check returns zero for the b...

EUVD-2026-66386

mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://::1/ yields the bracketed string, and then tests it with net.isIP. That call returns zero for a...

CVE-2019-9849

CVE-2019-9849: Grafiche dei punti elenco remote recuperate in “modalità stealth” in LibreOffice LibreOffice dispone di una 'modalità stealth' in cui solo i documenti provenienti da posizioni considerate 'attendibili' possono recuperare risorse remote. Questa modalità non è quella predefinita, ma...

Analysis-for-stage1-shellcode-loader-from-hacking-

Análise do carregador de shellcode do estágio 1 da Hacking Team Fluxograma do código IoC de rede https://172\.20\.20\.164 root@kitploit: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;...

CVE-2026-33712

CVE-2026-33712 - SSRF non autenticata in Typebot Descrizione Typebot = 3.15.2 corretto in 3.16.0 contiene una vulnerabilità di Server-Side Request Forgery SSRF non autenticata nell'endpoint di anteprima della chat. Endpoint: POST /api/v1/typebots/typebotId/preview/startChat L'endpoint di anteprim...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 Questa è un exploit per CVE-2017-7047, un errore logico in libxpc che consentiva a mittenti di messaggi malintenzionati di inviare oggetti xpcdata supportati da memoria condivisa. I consumatori di messaggi xpc no...

CSRFER

CSRFER root@kitploit: / / | \ | | \ | / /\ --.| |/ / | | | | |/ / | | --. \ /| | | || / | /// / |\ | | | || |\ \ //| \| /| | -.--. " '-, ',' 2 \ \q \ . \ .--' '----. / . . \ .'.' \ .-.\ '-, ,/ .---;- . \ \ .\ // '-. \ \ | '. , '-. c=' Cooo -. '-. '. '-. \ snd '-. '. '-. \ ---' CSRFER...

CVE-2025-8110-PoC

CVE-2025-8110 PoC Script proof-of-concept in Python per CVE-2025-8110 — Gogs v0.13.3 UpdateRepoFile symlink RCE. Colpo singolo: la stessa PUT malevola attiva git fetch → sshCommand → reverse shell. ⚠️ Solo per scopi educativi e ricerca di sicurezza autorizzata. Eseguire questo strumento contro...

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF durch URL-Parser-Differenz Programmcode Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

cve-2024-34351-demo

CVE-2024-34351 Demo Minimale Next.js 14.0.0-Anwendung zur Demonstration von CVE-2024-34351 – einer Server-Side Request Forgery SSRF-Schwachstelle in Next.js Server Actions. Entdeckt von Adam Kues und Shubham Shah bei Assetnote. Behoben in Next.js 14.1.1. Wie die Schwachstelle funktioniert Wenn ei...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

Malicious code in kelly-stake-sizing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca23e704ca44d185fc873044a3a967e06d996970f59a526d3390e1f0ab45a9d [email protected] declares postinstall = 'node scripts/install-check.cjs'. That script fetches a JSON config from...

anubis-fetch

anubis-fetch root@kitploit: $ nix run github:fzakaria/anubis-fetch -- https://lore.kernel.org/linux-mm/some-thread/T/ Un CLI veloce in Go per recuperare URL dietro i muri proof-of-work di Anubis e i controlli di fingerprint di Cloudflare — risolvendo la sfida in-process e ricorrendo a un browser...

EUVD-2026-64775

Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllowedHTTPURL in config/security/securityConfig.go applies the configured pattern list and then re-checks a canonicalised form of an integer, hex or...