CVE-2021-31166

CVE-2021-31166 0x00.Описание Это доказательство концепции для CVE-2021-31166 «Уязвимость удаленного выполнения кода в стеке протокола HTTP», разыменование освобожденного указателя use-after-free в http.sys, исправленное Microsoft в мае 2021 года. Насколько мне известно, это может вызвать только...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...

propox

Propox 🛡️🚀 Propox 는 Rust로 작성된 고성능, 안전하며 관찰 가능한 HTTP/HTTPS 프록시입니다. 고급 보안 메커니즘을 사용하여 악의적인 클라이언트로부터 적극적으로 방어하면서 높은 처리량의 트래픽을 처리하도록 설계되었습니다. ✨ 주요 기능 🚀 극한의 성능 최적화된 동시성 : 비차단 I/O를 위해 Tokio 와 Hyper 기반. Lock-Free 상태 : 핫 경로에서 락 경합을 제거하기 위해 DashMap 사용. 연결 풀링 : 백엔드 TCP 연결 재사용 Keep-Alive. 벤치마크 : 표준 모드 : 14,00...

Strutscli

StrutsExp Использование strutsexp http://example.com/index.action...

CVE-2024-47167-Environment-Setup

Компоненты: 1. gradiocontainer: размещает внутренний HTTP-сервер на порту 5678 2. targetinternalserver: запускает Python-приложение с использованием уязвимой версии gradio 4.40.0...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

apache-vulnerability-testing

Инструмент тестирования уязвимостей Apache HTTP Server Этот репозиторий предоставляет доказательство концепции PoC для тестирования различных уязвимостей в Apache HTTP Server, включая атаки с путаницей имён файлов, SSRF, отказ в обслуживании и другие, связанные с недавними CVE. Инструмент...

CVE-2023-0214

SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept для уязвимости HTTP Response Splitting в Skyhigh Secure Web Gateway...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Apache HTTP Server 2.4.49에서의 경로 탐색 및 파일 노출 취약점 Apache HTTP Server 2.4.49의 경로 정규화 변경에서 결함이 발견되었습니다. 공격자는 경로 탐색 공격을 사용하여 Alias와 같은 지시문으로 구성된 디렉터리 외부의 파일에 URL을 매핑할 수 있습니다. 이러한 디렉터리 외부의 파일이 일반적인 기본 구성인 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이러한 별칭 경로에 CGI 스크립트가 활성화된 경우...

CVE-2025-31650

Apache Tomcat 10.1.39 - 서비스 거부 DoS 이 도구는 비정상적인 priority 헤더를 사용하여 대량의 비동기 HTTP/2 요청 플러드를 수행하여 Apache Tomcat 서버버전 10.1.1010.1.39의 안정성을 테스트합니다. ⚠️ 이는 교육 및 연구 목적 으로만 엄격히 사용됩니다. ❌ 저자는 불법적이거나 승인되지 않은 사용에 대해 책임을 지지 않습니다. 🧰 기능 비정상적인 HTTP/2 priority 헤더를 무작위로 전송 멀티스레드 비동기 아키텍처 httpx 실시간 가용성 모니터링 속성, CVE 또는...

cve-2023-44487

CVE-2023-44487 HTTP/2 Быстрый сброс В этом репозитории есть несколько примеров, которые не были полностью протестированы для анализа воздействия, но я просто хотел продемонстрировать концепцию этой атаки starting many streams and immediately sending RSTSTREAM frame to avoid reaching...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Проверка уязвимости PoC Сканер доказательства концепции для обнаружения уязвимости React Server Components RSC в приложениях Next.js CVE-2025-55182. Использование Это только проверка, чтобы определить, уязвим ли сервер, основанная на этом релизе от Searchlight Cyber...

CVE-2021-41773

CVE-2021-41773 — Эксплуатация Path Traversal и RCE в Apache Описание прохождения комнаты TryHackMe "Modern Web Stacks" , посвященной эксплуатации CVE-2021-41773 — уязвимости path traversal в Apache HTTP Server 2.4.49, которая приводит к удаленному выполнению кода при включенном modcgi. Краткая...

CVE-2026-105324

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted HTTP request with injected headers via the state parameter, the attacker can leverage the underlying web server's...

Oracle E-Business Suite - Server-Side Request Forgery

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. id:...

Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...