CVE-2026-86065 Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauthenticated WebSocket clients with permissive origin handling, does not call SetReadLimit to bound message size, and has n...

CVE-2026-86065 Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauthenticated WebSocket clients with permissive origin handling, does not call SetReadLimit to bound message size, and has n...

CVE-2026-86065

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauthenticated WebSocket clients with permissive origin handling, does not call SetReadLimit to bound message size, and has n...

text4shell-scan

text4shell-scan A fully automated, accurate, and extensive scanner for finding vulnerable text4shell hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for...

Exploit for Path Traversal in Apache Http_Server

Apache CVE-2021-41773 Security Lab A controlled cybersecurity...

nodejshell

NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...

CVE-2023-50164-Apache-Struts-RCE

Contains vulnerable WAR file and docker file that can be used to test CVE-2023-50164-Apache-Struts-RCE. This dockerfile and vulnerable application is compiled and designed using resources and code from https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE. Thanks to him for such a detaile...

Klever-Go: /log controls global node logging

An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...

GHSA-9V8P-FRVJ-2PCM Klever-Go: /log controls global node logging

An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...

CVE-2023-40028

CVE-2023-40028 PoC Exploit Symlink Upload Vulnerability in Ghost CMS Leading to Arbitrary File Read POC Image Vulnerability Details CVE-2023-40028 is a vulnerability in Ghost CMS versions prior to 5.59.1 , where authenticated users can upload symbolic links symlinks that lead to arbitrary file...

pastenum

Pastenum Pastenum is a text dump enumeration tool. It is designed to help find and enumerate datadumps, and doxs posted on public sites. It currently searches sites github.com, gist.github.com, pastebin.com, pastee.org, and pastie.org. Pastenum is a gem rewrite of nullthreat's original pastenum2...

shimit

shimit shimit 是一个实现 Golden SAML 攻击的 Python 工具。更多信息可在我们博客中的以下文章中找到。 root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY --SamlValidity SAMLVALIDITY -n SESSIONNAME -r ROLES -id ARN -o OUTFILE -l LOADFILE -t...

scallion

2020 项目更新 Scallion 是一个用于学习 OpenCL 和 RSA 的业余项目。我们目前没有在维护 scallion 。它在两个重要方面已经过时： 1. Tor 已经迁移到 v3 Onion 地址，而 scallion 不支持此版本。旧的 v2 地址将在 2021 年 10 月 停止工作。新规范使用了不同的密码学原语，整体上更加复杂。我们在 GPU 上批量生成 RSA 密钥的技巧在新的 ECDSA 密钥需求下无法以相同方式工作。在 GPU 上生成类似（但不兼容）的 ECDSA 密钥是可能的，用于比特币地址生成。请参见 vanitygen-plus 或更早的...

domato

Domato 🍅 Un fuzzer de DOM Escrito y mantenido por Ivan Fratric, [email protected] Copyright 2017 Google Inc. Todos los derechos reservados. Licenciado bajo la Apache License, Versión 2.0 la "Licencia"; no puede utilizar este archivo excepto en cumplimiento de la Licencia. Puede obtener una...

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner Yo, this is a dope multi-threaded Python script by keklick1337 to hunt down domains vulnerable to CVE-2025-30208 in Vite. Basically, it checks if you can snag random files via the @fs endpoint with ?raw?? or ?import&raw?? — think /etc/passwd leaks and other juicy...

filebuster

Filebuster 一个极快且灵活的Web模糊测试工具 它是什么？ Filebuster 是一个HTTP模糊测试/内容发现脚本，拥有大量功能，设计易于使用且速度飞快！它使用了世界上（PERL领域）最快的HTTP类之一——Furl::HTTP。同时，线程模型经过优化，以尽可能快地运行。 功能特性 它集成了大量功能，例如： 字典列表的正则模式 支持HTTP/HTTPS/SOCKS代理 允许使用通配符指定多个字典列表 额外的文件扩展名 可调整的超时和重试次数 可调整的延迟/限速 基于HTTP状态码、响应长度或头部/正文中的单词隐藏结果 支持自定义Cookie 支持自定义请求头...

CVE-Requests-1896609

CVE Requests 1896609 - feiskyer/mcp-kubernetes-server Executive Summary This report details two critical security vulnerabilities discovered in the feiskyer/mcp-kubernetes-server package. When deployed, the server exposes an MCP tool named kubectl which is intended to provide limited, safe access...

CVE-2026-84709

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. When a custom credential type is created or updated, the injector configuration is validated by rendering each attacker-supplied Jinja2 template synchronously inside the web request worker, with no limit on iteration...

ir-rescue

ir-rescue ir-rescue 由两个姊妹脚本组成，用于从 32 位和 64 位 Windows 系统 ir-rescue-win 以及 Unix 系统 ir-rescue-nix 收集大量的 取证数据 。脚本遵循易失性顺序以及执行过程中会发生变化的工件（例如，Windows 上的预取文件），旨在用于 事件响应 在分析和调查过程的不同阶段。每个脚本描述如下： ir-rescue-win 完全用 Batch 编写，可以设置为对特定类型的 实时数据 和来自可用卷影复制服务 VSS 副本的 历史数据 执行全面且定制化的采集。 ir-rescue-win 使用了内置的 Windows...