CVE-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety non-intrusive and its specific utility for system administrators. Here are a few options for your GitHub description and a template for your README.md. GitHub Repositor...

CPanel-Audit-Remediation-Tool

🛡️ Oscar Constanzo Audit & Patch Tool CVE-2026-41940 Professional Security Auditing & Incident Response Suite for cPanel Infrastructure. 📖 Description This tool was developed by Oscar Constanzo Quezada, AKA Underhost to identify and remediate the CVE-2026-41940 vulnerability in cPanel servers. The...

CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC

Watch for the double-free in real-time sudo tail -f /usr/local/apache2-vuln/logs/errorlog | grep -i "double free|exit signal" Run the PoC python3 /cve-2026-23918-poc.py localhost 9443...

CVE-2026-23918-test

CVE-2026-23918-test This repository contains a Proof of Concept PoC demonstrating the Double Free vulnerability CVE-2026-23918 in Apache HTTP Server 2.4.66 modhttp2. The vulnerability stems from a race condition during early RSTSTREAM frame processing. I focused on the timing window where the...

Spring-Cloud-Function-SpEL

Spring-Cloud-Function-SpEL Visit my personal blog for details https://pizz33.github.io/ A test environment for Spring Cloud Function SpEL expression injection Version: Java 11. Start with java -jar demo-0.0.1-SNAPSHOT.jar Once set up, access port 127.0.0.1:8080 POST /functionRouter HTTP/1.1 Host:...

CVE-2021-41773

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart To access docker container for custom config file $ docker exec -it /bin/bash file config in /usr/local/apache2/conf/httpd.conf after config run comma...

c2finder

c2finder Mandatory disclaimer: I am not a master coder by any means, so this is a very simple script. Do not rely on this to be perfect. I am open to feedback or ideas for improvements, though : Description This script downloads the master C&C list from Bambanek Consulting...

CVE-2020-13768

🐞 CVE-2020-13768: MiniShare 1.4.1 - Stack-Based Buffer Overflow Stack-based buffer overflow in MiniShare 1.4.1 reachable through a single HTTP PUT request. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and affected software About the vulnerability...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107226 Source advisory: MEND:CVE-2026-107226...

-cve-2021-45232

Get Full Article Soon On https://Hellofhackers.com...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Run the exploit python3 exploit.py...

CVE-2025-62168

CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...

cve-2021-44228-waf-tests

Simple bash script to test your WAF or other devices against Log4Shell attack strings and various bypasses Bypass tricks from: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words To run: ./cve-2021-44228.sh -t -c Or to use the defaults of https://127.0.0.1 and 403: ./cve-2021-44228....

CVE-2026-33555

HTTP Request Smuggling via HAProxy H3/QUIC Standalone FIN Body Validation Bypass Full post here : https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Summary A vulnerability in HAProxy's HTTP/3 implementation allows an attacker to send an HTTP request with a...

CVE-2025-55315-Scanner-Monitor

CVE-2025-55315 Vulnerability Scanner and TLS Proxy This repository contains tools to detect and monitor ASP.NET Core applications vulnerable to CVE-2025-55315, which involves HTTP request smuggling due to conflicting HTTP headers. Tools Included 1. Python Vulnerability Scanner...

CVE-2026-21710

CVE-2026-21710 — Node.js req.headersDistinct DoS Summary Field| Value ---|--- CVE ID| CVE-2026-21710 Published| 2026-03-30 CVSS v3.1| 7.5 HIGH AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE| CWE-770 — Allocation of Resources Without Limits or Throttling Affected| Node.js 20.x, 22.x, 24.x, 25.x Fixed in|...

CVE-2025-62168

CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...

CVE-2026-24072-Analysis

CVE-2026-24072: Apache HTTP Server modrewrite Privilege Escalation Analysis CVE-2026-24072 is a moderate-severity local privilege escalation vulnerability in Apache HTTP Server 2.4.66 and earlier. It allows local .htaccess authors to read arbitrary files on the filesystem with the privileges of t...