CVE-2026-9256-Poc

nginx ngxhttprewritemodule Heap Buffer Overflow Description nginx Plus and nginx Open Source ngxhttprewritemodule contains a heap buffer overflow vulnerability. When a rewrite directive uses a regex with multiple overlapping PCRE capture groups e.g. ^/.$ and a replacement referencing multiple...

s3sec

s3sec Prueba los buckets de AWS S3 para acceso de lectura/escritura/eliminación Esta herramienta fue desarrollada para probar rápidamente una lista de buckets de S3 para acceso público de lectura, escritura y eliminación con fines de pruebas de penetración en programas de bug bounty. Screenshot...

s3sec

s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...

EUVD-2026-78356

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the formpost response mode. An...

CVE-2026-44203

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the formpost response mode. An...

CVE-2026-44203 OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the formpost response mode. An...

CVE-2026-44203 OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the formpost response mode. An...

CVE-2019-20085

📂 CVE-2019-20085 – TVT NVMS-1000 Directory Traversal Exploit By Z3R0 Author: Z3R0 CVE: CVE-2019-20085 Target: TVT NVMS-1000 all known versions prior to patch Vuln Type: Unauthenticated Directory Traversal Date: Insert Your Release Date 🔍 Vulnerability Summary TVT's NVMS-1000 software contains a...

CVE-2026-44202 OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application client token. SessionRequestHandler passes th...

CVE-2026-44202 OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application client token. SessionRequestHandler passes th...

CVE-2026-44202 OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application client token. SessionRequestHandler passes th...

base-drupal

BASE-DRUPAL This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-drupal Image based on: https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...

CVE-2021-22053

CVE-2021-22053 CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144 Requirements for the bash script ban.sh Command-line JSON processor jq. Install on Debian-based Linux root@kitploit: sudo apt-get install jq Download and use the script git clone...

rustls

Rustls 是一个用 Rust 编写的现代 TLS 库。 状态 Rustls 已被许多组织和项目在生产环境中使用。我们力求保持合理的 API 表面稳定性，但随着我们为支持新功能或性能改进而做出变更，API 仍可能持续演进。 我们在路线图中列出了未来计划。我们还提供基准测试，以防止性能回退，并让你在目标硬件上评估 rustls。 如果你愿意提供帮助，请参阅 CONTRIBUTING.md。 维护者将 "rustls" 读作 rustles（而非 rust-TLS），但我们对此并无强烈意见。 更新日志 每个版本中详细的变更列表可在...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

popeye

Popeye: Kubernetes ライブクラスターリンター Popeye は、ライブの Kubernetes クラスターをスキャンし、デプロイされたリソースや設定に関する潜在的な問題を報告するユーティリティです。 Kubernetes の状況が拡大するにつれ、クラスターを調整する多数のマニフェストやポリシーを人間が追跡することは課題になりつつあります。 Popeye は、ディスク上にあるものではなく、デプロイされているものに基づいてクラスターをスキャンします。クラスターを lint...

Raccoon

Raccoon Offensive Security Tool for Reconnaissance and Information Gathering Features DNS details DNS visual mapping using DNS dumpster WHOIS information TLS Data - supported ciphers, TLS versions, certificate details and SANs Port Scan Services and scripts scan URL fuzzing and dir/file detection...

OpenSSL-1_0_1g_CVE-2015-1790

OpenSSL 1.0.1g 2014年4月7日 版权所有 c 1998-2011 The OpenSSL Project 版权所有 c 1995-1998 Eric A. Young, Tim J. Hudson 保留所有权利。 描述 OpenSSL项目是一项协作努力，旨在开发一个健壮、商业级、功能齐全的开源工具包，实现安全套接层（SSL v2/v3）和传输层安全（TLS v1）协议，以及一个全功能的通用密码库。该项目由一个全球志愿者社区管理，他们通过互联网进行沟通、规划和开发OpenSSL工具包及其相关文档。 OpenSSL基于Eric A. Young和Tim J...

CVE-2024-9264

CVE-2024-9264 参考文档 https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. 漏洞概要 项目| 内容 ---|--- CVE| CVE-2024-9264 目标| Grafana SQL Expressions 影响| 本地文件包含LFI、远程代码执行RCE 严重程度| 严重 CVSS 9.9 攻击条件| 经过身份验证的用户管理员权限 攻击方式| 滥用 SQL Expression 功能执行 DuckDB SQL Grafana...