Lucene search
+L

1840 matches found

Kitploit
Kitploit
added 2026/09/14 4:44 p.m.7 views

cli

HTTPie CLI: human-friendly HTTP client for the API era...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 12:30 p.m.6 views

CVE-2019-17638-Jetty

JETTY The Jetty project is a 100% Java HTTP Server, HTTP Client and Servlet Container from the eclipse foundation http://www.eclipse.org/jetty/ Jetty is open source and is dual licensed using the Apache 2.0 and Eclipse Public License 1.0. You may choose either license when distributing Jetty...

9.4CVSS8.1AI score0.11138EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 8:23 a.m.6 views

slinger

slinger投石器 An HTTP Client for Rust designed for hackers. Explore the docs » View Demo · ·...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 5:31 a.m.8 views

burner-net

BurnerNet Zero-trust, anti-forensic HTTP client. Wipes secrets. Severs traces. CPR in a Stealth Tank. 👻 BurnerNet is a C++20 anti-forensic HTTP client. It provides a fluent, CPR-like API for apps that cannot fully trust the local machine—physically wiping secrets from RAM and severing execution...

5.9AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.831 views

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

7.5CVSS6.8AI score0.76875EPSS
SaveExploits18References3
Kitploit
Kitploit
added 2026/09/14 1:53 a.m.9 views

forbidden

Forbidden Bypass códigos de estado de respuesta HTTP 4xx y más. La herramienta está basada en Python Requests, PycURL y HTTP Client. Probado en Kali Linux v2024.2 64-bit. Hecho con fines educativos. ¡Espero que sea útil! Planes futuros: Añadir la opción silent para suprimir la salida de consola...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:06 p.m.5 views

RustTLSX

RustTLSX 🦀 . Un cliente HTTP furtivo avanzado para Rust. Diseñado para desarrolladores conscientes de la privacidad que necesitan control total sobre su huella de red. Parece un navegador. Actúa como un navegador. Escrito en Rust. Créditos y Fundamentos Construido sobrebogdanfinn/tls-client - la...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 2:56 p.m.8 views

square__retrofit_CVE-2018-1000850_2-4-0

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: root@kitploit: implementation 'com.squareup.retrofit2:retrofit:2.4.0...

7.5CVSS7.6AI score0.04033EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/11 10:16 p.m.12 views

CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

6.3CVSS0.00219EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 9:51 p.m.17 views

CVE-2026-90455

This vulnerability involves a reverted update to a bundled HTTP client library within a log-processing component , reintroducing a previously vulnerable version. The root cause is that a prior patch raising the library to a fixed version was undone, restoring the vulnerable code. However, the onl...

6.3CVSS0.00219EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 9:51 p.m.6 views

CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

6.3CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 9:51 p.m.30 views

CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

6.3CVSS0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.12 views

PT-2026-90524

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

6.3CVSS0.00219EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.8 views

axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NOPROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the...

8.6CVSS0.0087EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.8 views

axios: Axios: Prototype pollution allows information disclosure and request manipulation

A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object...

9.1CVSS0.00715EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2026/09/09 4:12 p.m.6 views

golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect

A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header redirected to b.com/ will not send that header to b.com. However, the...

6.1CVSS5.8AI score0.00671EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/08 8:48 p.m.9 views

EUVD-2026-70251

HTTPX2: Streaming response decompression does not bound peak memory decompression amplification...

7.5CVSS5.9AI score0.0035EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/08 12:18 p.m.9 views

Retrofit-1

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: root@kitploit: implementation 'com.squareup.retrofit2:retrofit:2.4.0...

6AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/07 1:03 p.m.6 views

CVE-2026-54171

A flaw was found in Excon, a Ruby HTTP client library. The RedirectFollower middleware, responsible for handling redirects, failed to remove sensitive header information when a request was redirected to a new target. This oversight could lead to the unintended exposure of confidential data to an...

6.5CVSS0.00427EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/07 12:00 a.m.2 views

UBUNTU-CVE-2026-48932

A flaw in Node.js HTTP client can cause a request desynchronization fo...

3.7CVSS0.00172EPSS
SaveExploits0References3
Rows per page
Query Builder