CVE-2026-100908 Eyeplus p2pcam HTTP stack-based overflow

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

CVE-2026-100908

A stack-based buffer overflow exists in Eyeplus 57.0.0.0308 within the p2pcam HTTP Parser component. This vulnerability affects an unknown function and can be triggered via a remote attack . The overflow may lead to high availability impact. The exploit has been disclosed to the public and is ava...

rapidresetclient

Rapid Reset Client Rapid Reset Client es una herramienta para probar mitigaciones y la exposición a CVE-2023-44487 vector de ataque DDoS Rapid Reset. Implementa un cliente HTTP/2 mínimo que abre un único socket TCP, negocia TLS, ignora el certificado e intercambia tramas SETTINGS. Luego, el clien...

CVE-2023-27163-exploit

CVE-2023-27163 — exploit SSRF de request-baskets Escribí este exploit para apuntar a CVE-2023-27163 , una vulnerabilidad de Server-Side Request Forgery SSRF encontrada en request-baskets versiones ≤ 1.2.1. La falla se encuentra en el endpoint /api/baskets/name, donde el parámetro forwardurl permi...

trawl

TRAWL Welcome to TRAWL! 👋 Self-hosted web scraping for applications and AI agents. Fetch pages through the native API, or connect an MCP client to read clean Markdown, extract structured data, capture screenshots, and inspect browser activity. TRAWL starts with a fast HTTP request, reuses solved...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....

CVE-2021-41773

Apache HTTP Server 2.4.49 - 路径遍历与远程代码执行（RCE）漏洞利用（修复版本） 描述 这是一个针对Apache HTTP Server 2.4.49漏洞（标识为CVE-2021-41773 ）的漏洞利用程序。原始版本的漏洞利用程序发布在Exploit-DB上，包含语法和运行错误，因此本版本已进行修正以确保其在Linux环境中的正常运行。 所做的修正 修正了if语句中的语法错误。 修正了for循环以确保其正确执行。 添加了适当的参数验证。 提高了可读性和错误处理能力。 包含了权限和执行的检查。 用法 chmod +x PoC.sh ./50383.sh...

nosurf-cve-2025-46721

CVE-2025-46721：justinas/nosurf 中同源检查失效导致的 CSRF 发生了什么？ 我受影响吗？ PoC 补丁 致谢 发生了什么？ 所有早于 1.2.0 版本的 nosurf 都未能对传入请求应用同源检查。 这是因为依赖 Go 标准库 net/http.Request 类型的 .URL.Scheme 字段来首先确保请求通过 HTTPS 服务，然后才应用同源检查。 上述 Scheme 字段在传入请求中不会被 Go HTTP 服务器填充： // For server requests, the URL is parsed from the URI // supplie...

CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...

Telesquare TLR-2855KS6 - Arbitrary File Creation

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. id: CVE-2021-46418 info: name: Telesquare TLR-2855KS6 - Arbitrary File Creation author: DhiyaneshDK severity: high description: | An unauthorized file creation vulnerability in...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

GoAhead Camera - Credential Disclosure

GoAhead camera credential disclosure vulnerability in system.ini. The vulnerability affects certain Wireless IP Camera P2P WIFICAM devices and allows unauthenticated remote attackers to access the system.ini configuration file through a crafted HTTP request. The exposed configuration may contain...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

FreeIPA - XML Entity Injection

Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. id: CVE-2022-2414 info: name: FreeIPA - XML Entity Injection...

vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. id: CVE-2023-25135...

cve-2021-41773

CVE-2021-41773 – Apache 路径遍历报告 摘要 Apache HTTP Server 2.4.49 版本中发现的漏洞，根据 Web 服务器配置，可通过路径遍历攻击暴露系统敏感文件 路径遍历：攻击者可通过包含 ../ 的路径访问 Web 根目录之外的文件 信息 漏洞名称 ：CVE-2021-41773 受影响版本 ：Apache HTTP Server 2.4.49 漏洞类型 ：路径遍历 官方补丁情况 ：已在 2.4.50 及以上版本修补 实验环境配置 基础镜像：httpd:2.4.49（DockerHub） 容器运行方式：Dockerfile +...

CVE-2022-21371

CVE-2022-21371 Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Inclusión de Archivos Locales Exploit Title: Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu Vendor Homepage:...