url-status-checker

Status Checker URL Status Checker v2.1 Status Checker est un script Python qui vérifie le statut d'une ou plusieurs URL/domaines et les catégorise en fonction de leurs codes de statut HTTP. Version 2.1.0 Fonctionnalités Vérifier le statut d'une ou plusieurs URL/domaines. Requêtes HTTP asynchrones...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Доказательство концепции PoC Описание Этот скрипт проверяет уязвимость CVE-2024-9466, добавляя /home/userSpace/devices/debug.txt к списку целевых URL-адресов или IP-адресов. Он определяет, уязвима ли цель, на основе кода состояния HTTP-ответа и того, перенаправляется л...

rsdl

rsdl Сканер поддоменов v.2 Сканирование поддоменов с помощью Ping и проверка статусов HTTP/S. Флаги| Значение| Описание ---|---|--- --hostname| example.com| Домен для сканирования. --output| | Записывает вывод с именем домена. --list| /tmp/lists/example.txt| Файл со списком поддоменов. Новые...

Parsero

Что такое Parsero? Parsero — это бесплатный скрипт, написанный на Python, который читает файл Robots.txt веб-сервера и просматривает записи Disallow. Записи Disallow сообщают поисковым системам, какие каталоги или файлы, размещённые на веб-сервере, не должны индексироваться. Например, «Disallow:...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

Horn3t

Horn3t 🐝 - Лучшая разведка поддоменов Разведка целей на молниеносной скорости Повышайте продуктивность, сосредотачиваясь на интересно выглядящих сайтах Перечисляйте критически важные сайты немедленно Жальте свою цель Horn3t — ваш инструмент №1 для визуального исследования поддоменов. Основываясь ...

forbidden

Forbidden Contournez les codes de statut de réponse HTTP 4xx et plus encore. L'outil est basé sur Python Requests, PycURL et HTTP Client. Testé sur Kali Linux v2024.2 64 bits. Conçu à des fins éducatives. J'espère qu'il vous aidera ! Plans futurs : Ajouter l'option silent pour supprimer la sortie...

CVE-2024-57778

CVE-2024-57778 Описание : Проблема в Orbe ONetView Roteador Onet-1200 позволяет удалённому злоумышленнику повышать привилегии через ответ сервера, изменяя код статуса с 500 на 200. Версии : Обнаружено в Orbe ONetView Roteador Onet-1200 Orbe 1680210096, но применимо ко всем версиям до указанной...

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

CVE-2026-8359

When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBinLoadHttpModule function in the dll would be called to set up a "module" object for that module. However, WOSHttpStatusModule.dll is not prese...

PT-2026-44093

When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin LoadHttpModule function in the dll would be called to set up a "module" object for that module. However, WOSHttpStatusModule.dll is not...

Astra Linux – Vulnerability in Apache2

HTTP/2 incoming headers that exceed the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client continues to send headers, this can lead to memory exhaustion...

CVE-2026-44425

ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the the name field of each filter property in the base64-encoded filter query parameter and the sortby query parameter, which are then passed directly as BSON/SQL keys in the...

CVE-2026-42041

CVE-2026-42041 affects Axios, a promise-based HTTP client for browser and Node.js. The issue is a prototype pollution gadget in the validateStatus merge strategy (uses the in operator), allowing pollution of Object.prototype to cause HTTP error responses (401/403/500, etc.) to be treated as succe...

Axios 授权问题漏洞

Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 have a vulnerability related to authorization. This vulnerability stems from the use of the mergeDirectKeys merging strategy in validateStatus. This strategy uses the in operator to traverse the...

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

Summary The /api/auth/login authentication endpoint does not execute in constant time. When a non-existent username is supplied, the server returns a 401/403 response almost immediately. When a valid username is provided, the server performs a bcrypt password comparison, causing a measurable dela...

CVE-2026-23738

CVE-2026-23738 affects Asterisk; prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user-supplied cookie/GET parameter values are echoed into the HTML of the /httpstatus page without escaping, enabling reflected XSS. The issue is mitigated by upgrading to the patched series (20.7...

Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions in the auth-url annotation when a specific misconfiguration occurs involving a custom-errors configuration that includes HTTP errors 401 or 403, and the configured default custom-erro...

Exploit for CVE-2025-55182

react2shell-scanner A command-line tool for detecting CVE-202...

CVE-2025-59429

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...