2523579 matches found
PoC-RCE-Rukovoditel
PoC-RCE-Rukovoditel CVE-2020-11819 および CVE-2020-15946 の概念実証です。Rukovoditel 2.4.x、2.5.x、2.6.1 でテスト済みです。 説明: このエクスプロイトには 2 つの実行モードがあります。セッション固定化の脆弱性 CVE-2020-15946 を利用する方法と、任意のプロファイルの任意のアカウントのアクセス認証情報を利用する方法です。 --type L オプションを使用すると、このスクリプトは悪意のあるリンクを作成します。被害者がブラウザでそのリンクにアクセスすると、任意のセッション ID...
CVE-2022-23779
CVE-2022-23779: Vulnerabilidad de divulgación del nombre de host interno Información Descripción: Zoho ManageEngine Desktop Central anterior a 10.1.2137.8 expone el nombre del servidor instalado a cualquier persona. El nombre de host interno se puede descubrir leyendo las respuestas de redirecció...
HouseProxy
HouseProxy フィッシングから親を守る、フィッシングURLのブロックに特化したHTTPプロキシ インストール root@kitploit: git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip3 install -r requeriments.txt 設定 root@kitploit: etc/HouseProxy.confを編集してデフォルトのユーザーとパスワードを変更します DNSにhouse.proxyのエントリを作成します 使用方法 root@kitploit: $ hug ...
user-scanner v1.5.1
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 465+ total scan vectors —including 175+ email-integrated sites and 290+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...
sap_igs_xxe
SAP IGS XXE attack CVE-2018-2392 and CVE-2018-2393 This module in Metasploit Framework Documentation Module Vulnerable Application This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities within the XMLCHART page of SAP Internet Graphics Servers IGS running versions 7.20,...
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
...
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
...
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
...
httpd applies no timeout while receiving a request body, parking a worker on a stalled client
...
secbench-dvwa
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...
httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
...
httpd mod_auth directory protection bypassed by a doubled slash in the request path
...
CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-70326
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-74768
Dell PowerProtect Data Manager versions 20.2.0.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API . A high-privileged remote attacker could exploit this to achieve information disclosure across a scope change. The CVSS v3.1 score is 4.1 (MEDIUM) with vector AV:...
CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...
inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
...
CVE-2021-42697
Akka HTTP 10.1.x 版本（早于 10.1.15）和 10.2.x 版本（早于 10.2.7）在解析 HTTP 头时可能遇到栈耗尽问题，从而允许远程攻击者通过发送带有深层嵌套注释的 User-Agent 头来实施拒绝服务攻击。 参考 MITRE Akka 博客 注释的任意嵌套 Akka 基本设置指南 PoC 说明 测试版本：10.2.4 目标服务器指纹：akka-http/ 负载片段：User-Agent:...
CVE-2019-25137-Version-Research
Investigación de Versiones Afectadas por CVE-2019-25137 Resumen de CVE-2019-25137 CVE-2019-25137 es una vulnerabilidad de inyección XSLT en Umbraco CMS. La vulnerabilidad está presente en la página web Visualizer XSLT Transformaciones de Lenguaje de Hojas de Estilo Extensibles. La URI vulnerable...
crackle
crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...