44 matches found
url-status-checker
ステータスチェッカー URLステータスチェッカー v2.1 ステータスチェッカーは、1つまたは複数のURL/ドメインのステータスをチェックし、HTTPステータスコードに基づいて分類するPythonスクリプトです。 バージョン 2.1.0 特徴 単一または複数のURL/ドメインのステータスをチェック パフォーマンス向上のための非同期HTTPリクエスト リダイレクトを追跡 関連するすべてのIPアドレスを追跡 ステータスコードの視認性を高める色分けされた出力 複数URLチェック時のプログレスバー 結果を出力ファイルに保存 アクセス不能なURLや無効なレスポンスに対するエラーハンドリング...
Parsero
什么是 Parsero? Parsero 是一个用 Python 编写的免费脚本,用于读取 Web 服务器的 Robots.txt 文件并查看 Disallow 条目。Disallow 条目告知搜索引擎,Web 服务器上托管的哪些目录或文件不得被索引。例如,"Disallow: /portal/login" 意味着 www.example.com/portal/login 上的内容不允许被 Google、Bing、Yahoo 等爬虫索引。这是管理员不向搜索引擎分享敏感或私人信息的一种方式。 但有时这些在 Disallow 条目中输入的路径,用户无需使用搜索引擎,只需访问 URL...
Sublist3r
About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...
Horn3t
Horn3t 🐝 - より良いサブドメイン偵察 偵察 ターゲットを驚くべき速度で 生産性向上 興味深い 見た目 のサイトに焦点を当てることで 列挙 重要なサイトを即座に 刺す あなたのターゲット Horn3tは、サブドメインを視覚的に探索するためのナンバーワンツールです。 優れたSublist3rフレームワーク(またはお好みのもので拡張可能)を基盤として、サブドメインを検索し、素晴らしい画像プレビューを生成します。HTTPステータスコードでターゲットの概要を素早く把握し、見つけたサブドメインを追加し、見つかったURLにワンクリックで直接アクセスできます。 インストール Google...
CVE-2026-55998
The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...
CVE-2026-42041
CVE-2026-42041 affects Axios, a promise-based HTTP client for browser and Node.js. The issue is a prototype pollution gadget in the validateStatus merge strategy (uses the in operator), allowing pollution of Object.prototype to cause HTTP error responses (401/403/500, etc.) to be treated as succe...
Axios 授权问题漏洞
Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 have a vulnerability related to authorization. This vulnerability stems from the use of the mergeDirectKeys merging strategy in validateStatus. This strategy uses the in operator to traverse the...
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
Summary The /api/auth/login authentication endpoint does not execute in constant time. When a non-existent username is supplied, the server returns a 401/403 response almost immediately. When a valid username is provided, the server performs a bcrypt password comparison, causing a measurable dela...
EUVD-2013-5850
Malware in sbrugna...
EUVD-2006-5710
Malware in sbrugna...
EUVD-2023-58908
Malicious code in bioql PyPI...
SUSE CVE-2025-54291
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...
Malicious code in es6-http-status-codes (npm)
The package es6-http-status-codes was found to contain malicious code...
Exploit for CVE-2025-46047
CVE-2025-46047 Silverpeas -u Example...
Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs
Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...
Exploit for CVE-2023-22622
DoS WP-Cron - CVE-2023-22622 Exploit PoC Overview This re...
PT-2023-31411 · Elastic · Agent +2
Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...
K15939: pl_tree.php XSS vulnerability CVE-2014-9342
Security Advisory Description Cross-site scripting XSS vulnerability in the tree view pltree.php feature in Application Security Manager ASM in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTML by accessing a crafted URL during automatic policy generation...
CVE-2021-43206
A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests...
Protect
A server-generated error message containing sensitive information vulnerability CWE-550 in FortiOS and FortiProxy web proxy may allow a malicious webserver to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages...