CVE-2023-35813

CVE-2023-35813 CVE-2023-35813 是一个概念验证（PoC），用于通过分析服务器响应头的修改来判断 Sitecore 实例是否存在漏洞。 用爱制作 by heretic 3...

POC-CVE-2023-32681

CVE-2023-32681 的 PoC 这是 CVE-2023-32681 的 Python 3 实现，影响使用 requests 版本 = 2.30.0 的客户端。 根据 https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4，每当服务器发出 3xx 重定向时，用户代理应修改请求，删除请求中的某些头部和字段。 这些字段的详细信息可参见 https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4-5。针对该 CVE，我在此高亮显示了相关部分。 requests 版本 = 2.30...

nextjs-cve-2025-29927-poc

Next.js 的 CVE-2025-29927 概念验证 Next.js 中间件中的授权绕过 · CVE-2025-29927 · GitHub 安全公告 Next.js 与损坏的中间件：授权工件 - zherowebsecurity 这是什么？ 该漏洞允许绕过中间件逻辑。 src/middleware.ts： root@kitploit: // 始终阻止任何请求 export function middleware return Response.json success: false, message: 'authentication failed' , status: 401...

mailMeta

一款取证工具，用于轻松分析邮件头，帮助快速发现攻击者。 目录 关于 mailMeta 安装 使用 Linux Windows 演示 贡献 灵感 常见问题 许可证 关于 mailMeta 什么是 mailMeta？ mailMeta 是一款基于 Python 的取证工具，它读取电子邮件文件中的邮件头，提取关键信息，以判断邮件是否合法。 使用 mailMeta 有哪些优势？ 你是否听说过邮件黑客攻击 或复杂的电子邮件犯罪...

MappedImagesDetector

MappedImagesDetector Escáner nativo de memoria de Windows para detectar inyecciones maliciosas de DLL y malware en memoria MappedImagesDetector es una herramienta de Windows de bajo nivel en C++20 diseñada para detectar técnicas de inyección maliciosa de DLL utilizadas por malware moderno,...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — El plugin Backup Migration para WordPress - Shell reversa Una versión extendida del exploit CVE-2023-6553 de Chocapikk que añade un modo de shell reversa con un solo comando sobre la webshell interactiva original. Vulnerabilidad CVE-2023-6553 — Ejecución remota de código no...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

CVE-2026-65979

OpenEXR (the reference implementation for the EXR image format, widely used in the motion picture industry) versions 3.4.0 through 3.4.12 contain an out-of-bounds read in the HTJ2K decoder . The decoder parses a header-length field (PLEN ) from a chunk's compressed data and advances the codestrea...

CVE-2026-65979 OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

InflativeLoading

InflativeLoading Artículo: https://winslow1984.com/books/malware/page/reflectiveloading-and-inflativeloading Historial de actualizaciones importantes En esta sección se proporcionan las actualizaciones importantes. Las actualizaciones importantes incluyen soporte o funcionalidades añadidas...

CVE-2026-55620

eml_parser is a Python module for parsing EML files. Prior to 3.0.2 , the eml_parser.routing.noparenthesis function in eml_parser/routing.py removes parenthesized CFWS comments from Received: headers using a regex-based fix-point loop with quadratic running time in nesting depth. A single Receive...

next-attack

Este es un proyecto de Next.js creado con create-next-app. Probando la vulnerabilidad Primero, puedes confirmar que el middleware funciona y debería redirigir al usuario: root@kitploit: curl http://localhost:3000/api/admin Luego, puedes mostrar cómo se está evadiendo el middleware con el siguient...

CVE-2026-55619

eml_parser , a Python module for parsing EML files, is vulnerable to a denial of service prior to version 3.0.2 . The flaw resides in eml_parser.parser.HeaderParser.header_fetch_parse, which delegates address parsing to email.utils.getaddresses(). A deeply nested CFWS comment construct in an e-ma...

EUVD-2026-65701

Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request body into X-Airbyte- headers, and AuthenticationHeaderResolver.resolveWorkspace consults...

CVE-2021-31166

CVE-2021-31166 检测利用CVE-2021-31166（HTTP协议栈漏洞）的尝试 Suricata规则 Zeek包 参考来源 https://corelight.blog/2021/05/27/detecting-cve-2021-31166-http-vulnerability/ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166 https://github.com/0vercl0k/CVE-2021-31166...

CVE-2026-55637 genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2017-5638

CVE-2017-5638 Las versiones de Apache Struts 2 2.3.x anteriores a 2.3.32 y 2.5.x anteriores a 2.5.10.1 tienen una falla en su analizador Jakarta Multipart. Esta falla provoca un manejo incorrecto de excepciones y la generación de mensajes de error al intentar cargar archivos. Como resultado, los...

CVE-2020-27223

CVE-2020-27223 Uso root@kitploit: $ mvn spring-boot:run 9.4.36.v20210114 root@kitploit: $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys 0m0.006s...

CVE-2014-6271-Apache-Debian

CVE-2014-6271-Apache-Debian Resumen Este repositorio es un entorno PoC de CVE-2014-6271. Puede desplegar un servicio web que incluye la vulnerabilidad utilizando la imagen de contenedor apache2. Preparación Construcción de la imagen Construya la imagen insegura desde el Dockerfile. root@kitploit:...

CVE-2026-55553

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient.ts, requestInternal recursively calls...