128 matches found
PyRat
PyRat PyRat, an open-source remote control project based on Python XmlRPC, including a client and a server also called the control end, hereinafter collectively referred to as the server. Disclaimer: This project is for technical exchange only. Do not use it for commercial or illegal purposes. An...
httpdoom
HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...
CVE-2025-30047: Deserialization of Untrusted Data
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
Oracle Applications DBA security vulnerabilities
A security vulnerability exists in Oracle Applications DBA versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical...
Oracle HRMS (US) security vulnerabilities
A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the US Payroll Year End component. It may allow low-privilege attackers to access HTTP-based interfaces, enabling unauthorized updates, insertions, or deletions of certai...
Oracle Trusted Answer Search security vulnerability
Version 26.1 of Oracle Trusted Answer Search contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow attackers with limited privileges to access HTTP-based networks, resulting in unauthorized access to critical data or all...
Oracle HRMS (US) security vulnerabilities
A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component, potentially allowing attackers with limited privileges to access HTTP-based networks and obtain unauthorized access to critical data or...
Oracle Helidon security vulnerabilities
Security vulnerabilities exist in Oracle Helidon versions 3.0.0 through 3.2.21, 4.0.0 through 4.5.5, and 27.0.0. These vulnerabilities stem from issues within the helidon-health component, potentially allowing unauthenticated attackers to access HTTP-based networks and read certain accessible dat...
Oracle HRMS (Norway) security vulnerabilities
A security vulnerability exists in Oracle HRMS Norway versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component, potentially allowing attackers with limited privileges to access HTTP-based networks and obtain unauthorized access to critical dat...
Oracle Helidon security vulnerabilities
A security vulnerability exists in Oracle Helidon versions 3.0.0 through 3.2.21. This vulnerability stems from issues within the helidon-cors component and may allow unauthenticated attackers to access HTTP-based networks. It could enable unauthorized updates, insertions, or deletions of certain...
Oracle JD Edwards EnterpriseOne Tools security vulnerabilities
A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and may allow low-privilege attackers to access HTTP-based networks. Under certain circumstances, they can make...
Oracle Product Hub security vulnerability
A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical data ...
CVE-2026-65596: Incorrect Authorization
n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials Header Auth, Basic Auth, Query Auth, OAuth in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit workflows can point the node...
PT-2026-63354
n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials Header Auth, Basic Auth, Query Auth, OAuth in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit workflows can point the node...
PT-2026-62985
Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance Process Management versions 14.6.0 through 14.8.0 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Banking Trade Finance Process Management product. This issue requires...
CVE-2026-48135: Heap-based Buffer Overflow
A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation...
CVE-2025-67635
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...
CVE-2025-67635: Improper Resource Shutdown or Release
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...
CVE-2025-66416
The MCP Python SDK, called "mcp" on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.23.0, tThe Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost...
