CVE-2023-25690_lab

HTTP-Request-Smuggling über Apache-Proxy Umgebungskonfiguration Infrastruktur...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

CVE-2025-55182-Lab

Laboratório CVE-2025-55182 Um laboratório prático para explorar CVE-2025-55182 React2Shell - Execução Remota de Código em Componentes de Servidor React. ⚠️ Aviso Legal Apenas para fins educacionais. Teste apenas em sistemas que você possui. Início Rápido root@kitploit: Clone and start git clone...

CVE-2020-5902-Vuln-Checker

Controllo Vulnerabilità CVE-2020-5902 Mentre esaminavamo la vulnerabilità con altri ricercatori, ci siamo resi conto che la maggior parte dei metodi attuali per testare la vulnerabilità può essere classificata come una forma di compromissione del sistema. Volevamo sviluppare un modo per testare l...

CVE-2002-0347

CVE-2002-0347 ثغرة اجتياز الدليل في Cobalt RAQ 4 تسمح للمهاجمين عن بُعد بقراءة الملفات المحمية بكلمة مرور، وربما الملفات خارج جذر الويب، عبر .. نقطتان في طلب HTTP. منشور Packetstorm على https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html منشور SecurityFocus على...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server für Windows 0.1 erlaubt es entfernten Angreifern, einen Denial of Service über eine HTTP-Anfrage für einen MS-DOS-Gerätenamen zu verursachen. Externe Referenz unter https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez alias @alt3kx...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:59136)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59136 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities when servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details...

CVE-2025-53770_Raw-HTTP-Request-Generator

Dieses Repository hat keine README-Datei...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — n8n HTTP Request Node Paginazione Prototype Pollution → RCE Un creatore di flussi di lavoro autenticato n8n 1.123.43 inquina Object.prototype nel processo server di n8n attraverso le impostazioni di paginazione del nodo HTTP Request, poi scala a esecuzione remota di codice abusan...

aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...

aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...

CVE-2021-41349

CVE-2021-41349 Exploit! Microsoft Exchange Server Spoofing-Schwachstellen-Exploit! Schritte zur Reproduktion! 1. Machen Sie eine HTTP-Anfrage wie diese und fangen Sie sie im Burp ab 2. Erstellen Sie einen CSRF-PoC dieser Anfrage und speichern Sie die HTML-Ausgabe in einer Datei 3. Öffnen Sie die...

Astra Linux – Vulnerability in PHP 8.1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, and 8.3. before 8.3.14, when using streams with a configured proxy and the “requestfulluri” option, the URI is not properly sanitized. This can lead to HTTP request smuggling, allowing attackers to use the proxy to send arbitrary HTTP reques...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

sh4d0wup

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

CVE-2026-78169

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-78169

A stack-based buffer overflow in the UTT HiPER 1250GW (up to 3.2.7-210907-180535 ) affects the strcpy function within the file /goform/aspRemoteApConfTempSend of the HTTP Request Handler component. Manipulation of the Profile argument triggers the overflow, allowing a remote attack. CVSS 4.0 rate...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...