requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

CVE-2026-107778

A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service DoS by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authentication Bypass Advanced Bypass 🔥 Overview An advanced PoC for CVE-2025-29927 , allowing authentication bypass in Next.js Middleware by manipulating specific headers. This template enhances WAF evasion and security bypass techniques. 🚀 Features ✅...

CVE-2025-12999

A flaw was found in openvsx-server. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on client machines through HTTP cache poisoning. The server generates download and verification URLs from untrusted proxy headers, such as X-Forwarded-Host, without...

CVE-2022-46169

CVE-2022-46169 Exploit Exploit to CVE-2022-46169 vulnerability on Cacti 1.2.19 Options -u --url victim's url -f --forwarded X-Forwarded value to bypass the auth -m --mode: check for Checking for Vulnerable Servers, or exploit for Fun exploitation mode :D Usage 1. $ ./cve202246169.py -u...

CVE-2026-107361

The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...

CVE-2026-107336

Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...

CVE-2023-38408

参考 / 情報 https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...

EUVD-2026-95119

The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...

CVE-2026-107361

The Malcolm security tool is vulnerable to an authentication bypass in the Arkime live capture service (arkime-live) . Because the service runs in network_mode: host and listens on port 8005 across all interfaces, a network-adjacent attacker can bypass the nginx proxy by connecting directly. The ...

CVE-2026-107361 Authentication Bypass Using an Alternate Path or Channel in Malcolm

The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...

CVE-2026-107336

The Malcolm front nginx reverse proxy contains an authentication bypass vulnerability. A

EUVD-2026-95115

Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...

CVE-2026-107336 Authentication Bypass by Spoofing in Malcolm

Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...

transfer.sh

SECURITY WARNING IP filter and HTTP auth bypass via unauthenticated X-Forwarded-For header spoofing transfer.sh Easy and fast file sharing from the command-line. This code contains the server with everything you need to create your own instance. Transfer.sh currently supports the s3 Amazon S3,...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – CrushFTP Authentication Bypass 🔎 Overview CVE-2025-2825 is a critical authentication bypass vulnerability affecting CrushFTP , a widely used secure file transfer server. The flaw allows remote attackers to bypass login authentication and gain administrative access by spoofing...

CVE-2024-35584

CVE-2024-35584 OpenSIS 인증된 SQL 인젝션 설명 Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php에 SQL 인젝션 취약점이 존재합니다. 이 취약점은 OpenSis Community Edition 9.18.0 및 그 이하 버전에 영향을 미칩니다. 개념 증명 예시 중 하나인 Ajax.php에서는 악의적인 활동이 발생하면 IP가 로그로 기록되어 데이터베이스에 삽입될 수 있음을 확인할 수 있습니다. 주의할 점은...

Typecho-Multiple-Vulnerabilities

Typecho Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2024-35538: In Typecho v1.3.0 there is a Client IP Spoofing vulnerability, which allows malicious actors to falsify their IP addresses by specifying an arbitrary IP as value of...

CVE-2025-48799-

CVE-2025-48799 – Apache Tomcat Remote Code Execution PoC This repository contains a proof-of-concept exploit for CVE-2025-48799, a remote code execution vulnerability discovered in Apache Tomcat 9.0.48. The flaw stems from an integer overflow in the HTTP header parser, which can be triggered by a...

CVE-2022-46169

Cacti | 인증 우회 | RCE | CVE-2022-46169 Cacti: Ruby로 작성된 인증되지 않은 원격 코드 실행 익스플로잇 Cacti Docker 이것은 Cacti RCE 취약점CVE-2022-46169에 취약한 도커라이즈된 애플리케이션입니다. Cacti를 실행하려면 링크를 참조하세요. https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2022-46169 사용법 / | | | / | | \ / | | | | \ | \ / | | | | | | | | | | | / ...