135421 matches found
CVE-2025-24893-EXP
CVE-2025-24893-EXP Versioni Affette xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 POC https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - XWiki Platform Exploit usage: python CVE-2025-24893.py -u -c...
CVE-2021-37832
CVE-2021-37832 CVE 2021-37832 poc utilizzo : python3 CVE-2021-37832.py http://test.com...
CS4277-CVE-Path-Traversal-Apache-HTTP-Server
CS4277-CVE-Path-Traversal-Apache-HTTP-Server Membri del team: Emily Nguyen, Jonathan Kim, Joon Jang Selezione dell'argomento del progetto: Progetto 1: Ricreare e sfruttare una CVE reale: Path Traversal CVE-2021-41773 nel server Apache HTTP. Obiettivo del progetto: Speriamo di riprodurre la...
CVE-2024-51428-PoC
CVE-2024-51428 - PoC di Blind SQL Injection in ZoneMinder Wrapper Python per sqlmap progettato per sfruttare CVE-2024-51428 in ZoneMinder. Questo strumento automatizza il rilevamento e lo sfruttamento di una vulnerabilità Blind SQL Injection mantenendo l'output pulito e focalizzato sui dati utili...
CVE-2017-5638
CVE-2017-5638 Le versioni di Apache Struts 2 2.3.x precedenti alla 2.3.32 e 2.5.x precedenti alla 2.5.10.1 presentano un difetto nel parser Jakarta Multipart. Questo difetto provoca una gestione errata delle eccezioni e la generazione di messaggi di errore quando si tenta di caricare file. Di...
MadeYouReset_Tester
MadeYouReset Checker Uno script Python leggero per rilevare se un server web è potenzialmente vulnerabile alla vulnerabilità denial-of-service HTTP/2 MadeYouReset — tracciata come CVE-2025-8671 CVSS 7.5 Alta. Contesto MadeYouReset è una vulnerabilità DoS HTTP/2 divulgata nell'agosto 2025 da...
CVE-2020-14882
CVE-2020-14882 CVE-2020-14882 Descrizione Vulnerabilità nel prodotto Oracle WebLogic Server di Oracle Fusion Middleware componente: Console. Le versioni supportate interessate sono 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 e 14.1.1.0.0. Una vulnerabilità facilmente sfruttabile consente a un...
CVE-2022-41741-742-Nginx-Vulnerability-Scanner
🛡️ Nginx Vulnerability Scanner Sviluppato da m10sec. Questo script rileva automaticamente la versione di Nginx su un server remoto e valuta se è vulnerabile a falle di sicurezza note, in particolare: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corruzione della memoria in...
trawl
TRAWL Welcome to TRAWL! 👋 Self-hosted web scraping for applications and AI agents. Fetch pages through the native API, or connect an MCP client to read clean Markdown, extract structured data, capture screenshots, and inspect browser activity. TRAWL starts with a fast HTTP request, reuses solved...
CVE-2026-105214: Server-Side Request Forgery (SSRF)
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
PT-2026-104638
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
CVE-2026-105216: Improper Certificate Validation
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets InsecureSkipVerify to true by default. Man-in-the-middle attackers can present any certificate to intercept or modify gRPC...
Debian dla-4819 : libapache2-mod-php8.2 - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4819 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4819-1 [email protected]...
caddy v2.11.7
a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help Powered by Special thanks to: Warp, built for coding with multiple AI agents Available for MacOS, Linux, & Windows Menu Features Install Build from source For...
web-vulnerability-scanner
vulnerabilityscanner VulnRadar – An intera...
Security Bulletin: Due to the use of HTTP/1.1 with Jetty server, IBM Sterling Control Center is vulnerable to Inconsistent Interpretation of HTTP Requests (CVE-2026-19203)
Summary HTTP/1.1 with Jetty server is used by IBM Sterling Control Center as part of dependency in jetty-http-12.0.25.jar. Vulnerability Details CVEID:CVE-2026-19203 DESCRIPTION: A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary...
Security Bulletin: Due to the use of HTTP/2 requests to a Jetty server, IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-12611)
Summary HTTP/2 requests with Jetty server is used by IBM Sterling Control Center as part of dependency in jetty-http2-common-12.0.25.jar. Vulnerability Details CVEID:CVE-2026-12611 DESCRIPTION: A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never...
Majordomo2 - SMTP/HTTP Directory Traversal
A directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface. id:...
[SECURITY] Fedora 45 Update: libsoup-2.74.3-12.fc45
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
