Lucene search
+L

44 matches found

Kitploit
Kitploit
added 2026/08/25 11:19 p.m.3 views

url-status-checker

ステータスチェッカー URLステータスチェッカー v2.1 ステータスチェッカーは、1つまたは複数のURL/ドメインのステータスをチェックし、HTTPステータスコードに基づいて分類するPythonスクリプトです。 バージョン 2.1.0 特徴 単一または複数のURL/ドメインのステータスをチェック パフォーマンス向上のための非同期HTTPリクエスト リダイレクトを追跡 関連するすべてのIPアドレスを追跡 ステータスコードの視認性を高める色分けされた出力 複数URLチェック時のプログレスバー 結果を出力ファイルに保存 アクセス不能なURLや無効なレスポンスに対するエラーハンドリング...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:30 a.m.1 views

Parsero

什么是 Parsero? Parsero 是一个用 Python 编写的免费脚本,用于读取 Web 服务器的 Robots.txt 文件并查看 Disallow 条目。Disallow 条目告知搜索引擎,Web 服务器上托管的哪些目录或文件不得被索引。例如,"Disallow: /portal/login" 意味着 www.example.com/portal/login 上的内容不允许被 Google、Bing、Yahoo 等爬虫索引。这是管理员不向搜索引擎分享敏感或私人信息的一种方式。 但有时这些在 Disallow 条目中输入的路径,用户无需使用搜索引擎,只需访问 URL...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:04 a.m.144 views

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/25 12:53 a.m.2 views

Horn3t

Horn3t 🐝 - より良いサブドメイン偵察 偵察 ターゲットを驚くべき速度で 生産性向上 興味深い 見た目 のサイトに焦点を当てることで 列挙 重要なサイトを即座に 刺す あなたのターゲット Horn3tは、サブドメインを視覚的に探索するためのナンバーワンツールです。 優れたSublist3rフレームワーク(またはお好みのもので拡張可能)を基盤として、サブドメインを検索し、素晴らしい画像プレビューを生成します。HTTPステータスコードでターゲットの概要を素早く把握し、見つけたサブドメインを追加し、見つかったURLにワンクリックで直接アクセスできます。 インストール Google...

5.7AI score
SaveExploits0References5
CVE
CVE
added 2026/08/05 7:51 a.m.62 views

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

5.3CVSS5.5AI score0.00205EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/24 5:55 p.m.93 views

CVE-2026-42041

CVE-2026-42041 affects Axios, a promise-based HTTP client for browser and Node.js. The issue is a prototype pollution gadget in the validateStatus merge strategy (uses the in operator), allowing pollution of Object.prototype to cause HTTP error responses (401/403/500, etc.) to be treated as succe...

8.2CVSS5.3AI score0.00611EPSS
SaveExploits1References41Affected Software1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.18 views

Axios 授权问题漏洞

Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 have a vulnerability related to authorization. This vulnerability stems from the use of the mergeDirectKeys merging strategy in validateStatus. This strategy uses the in operator to traverse the...

6.5CVSS5.8AI score0.00611EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2026/03/24 7:18 p.m.13 views

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

Summary The /api/auth/login authentication endpoint does not execute in constant time. When a non-existent username is supplied, the server returns a 401/403 response almost immediately. When a valid username is provided, the server performs a bcrypt password comparison, causing a measurable dela...

5.3CVSS5.9AI score0.00468EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2013-5850

Malware in sbrugna...

5.8CVSS6.1AI score0.01281EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2006-5710

Malware in sbrugna...

5CVSS6.4AI score0.02794EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2023-58908

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00589EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/10/02 11:23 p.m.7 views

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

5.3CVSS7.2AI score0.0036EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.10 views

Malicious code in es6-http-status-codes (npm)

The package es6-http-status-codes was found to contain malicious code...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/04/14 10:51 a.m.133 views

Exploit for CVE-2025-46047

CVE-2025-46047 Silverpeas -u Example...

7.2AI score0.00355EPSS
SaveExploits3
Kitploit
Kitploit
added 2024/04/27 4:55 p.m.61 views

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

7.2AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2024/03/20 1:48 p.m.913 views

Exploit for CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 Exploit PoC Overview This re...

5.3CVSS6.9AI score0.01659EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-31411 · Elastic · Agent +2

Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...

6.8CVSS6.5AI score0.00666EPSS
SaveExploits0References10
F5 Networks
F5 Networks
added 2023/02/21 7:53 p.m.39 views

K15939: pl_tree.php XSS vulnerability CVE-2014-9342

Security Advisory Description Cross-site scripting XSS vulnerability in the tree view pltree.php feature in Application Security Manager ASM in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTML by accessing a crafted URL during automatic policy generation...

4.3CVSS5.8AI score0.02117EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2022/05/04 3:25 p.m.49 views

CVE-2021-43206

A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests...

4.3CVSS4.7AI score0.00789EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2022/05/03 12:00 a.m.130 views

Protect

A server-generated error message containing sensitive information vulnerability CWE-550 in FortiOS and FortiProxy web proxy may allow a malicious webserver to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages...

4.3CVSS4.8AI score0.00789EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder