RLSA-2026:65116 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs...

log4j2burpscanner

log4j2burpscanner CVE-2021-44228, log4j2 Burp plugin Java version. DNSlog uses non-dnslog.cn domain names. Effect demonstration: Target range the range is relatively slow, but internet assets are fine. The reason might be that the range handles other request headers poorly, or the headers are too...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Script en bash que permite identificar y/o explotar la vulnerabilidad Log4shell de forma remota. Esta herramienta realiza distintas pruebas usando LDAP payloads y cabeceras X-Api-Version, User-Agent y X-Forwarded-For. Siempre utilizar este script con autorización previa...

CVE-2024-38063

CVE-2024-38063 Overview In August 2024, Microsoft released a patch for a Windows TCP/IP Remote Code Execution RCE vulnerability. Some researchers have already published Proofs of ConceptPoC for this vulnerability, and around the same time, PatchPoint researchers also completed their analysis and...

CVE-2023-3519

CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 Scanner A simple scanner to find netscalers and look at the las modified date on the HTTP header response this project is a scanner made by me in C using the source-code of mrr3b00t in powershell...

CVE-2024-24549

Apache Tomcat DoS Exploit CVE-2024-24549 Description This repository contains a proof-of-concept PoC exploit for a denial-of-service DoS attack against Apache Tomcat version 9.0.83 , based on an issue identified in the handling of HTTP headers and payloads. This script generates malicious HTTP...

CVE-2014-6271

CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...

TomcatKiller-CVE-2025-31650

TomcatKiller-CVE-2025-31650 A tool designed to detect the vulnerability CVE-2025-31650 in Apache Tomcat versions 10.1.10 to 10.1.39 This vulnerability allows an attacker to trigger a memory leak by sending specially crafted HTTP/2 requests with invalid priority headers, leading to a...

AOSP-DownloadProviderHeadersDumper

AOSP-DownloadProviderHeadersDumper PoC Exploiting Headers Disclosure in Android's Download Provider CVE-2018-9546 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Request-Headers-Disclosure-CVE-2018-9546.pdf More Information...

Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Apache Authentication Flaw Research CVE-2024-38476 Prepared By: Abanoub Ehab 🛡️ Huawei Telecommunications Student Club - AOU A comprehensive technical research paper on the semantic ambiguity vulnerability in Apache HTTP Server and its impact on backend response handling. 📝 Abstract...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

hsecscan

hsecscan Un escáner de seguridad para cabeceras de respuesta HTTP. Requisitos Python 2.x Módulos de Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Instalación root@kitploit: $ pip install hsecscan Uso root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -...

cve-2023-31346-poc

Firmware Memory Leak The code here aims to demonstrate the memory leaks in guest messages headers and the CPUID request guest message. Prerequisites Install rustup. Install a Linux kernel with SEV-SNP host support. I used a kernel with my a few of own patches...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client es una herramienta para probar mitigaciones y exposición a CVE-2023-44487 vector de ataque DDoS de reinicio rápido. Implementa un cliente HTTP/2 mínimo que abre un único socket TCP, negocia TLS, ignora el certificado e intercambia marcos de CONFIGURACIÓN...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

log4j2-CVE-2021-45046

Sample Log4j2 vulnerable application CVE-2021-45046 Versions Affected: all versions from 2.0-beta9 to 2.15.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45046 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it:...

CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

CVE-2026-16272

PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) is affected by a client IP spoofing vulnerability caused by use of less trusted source —specifically, untrusted HTTP headers are relied upon for identifying the client IP, allowing exploitation of trusted iden...

CVE-2016-5699-poc

CVE-2016-5699-poc PoC code of CVE-2016-5699 Vulnerability poc.py file is url sender to receiver.py receiver.py is Flask http receive headers testing Video : https://youtu.be/ugUt5iKpcV4 bunseokbot@UpRoot...

CVE-2025-31650

TomcatKiller - CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat...