CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 — критическая уязвимость удалённого выполнения кода RCE, обнаруженная в Apache Tomcat поражаются системы, в которых включены HTTP PUT-запросы путем установки параметра инициализации "read-only" сервлета Default в значение "false". Версии Tomcat до 9.0.1 Beta, 8.5.23,...

PoC_CVE-2019-0217

Этот репозиторий содержит эксплойт для доказательства концепции уязвимости CVE-2019-0217, а также Dockerfile для настройки веб-сервера, уязвимого для этой CVE. Описание CVE В Apache HTTP Server 2.4 версии 2.4.38 и более ранних, состояние гонки в modauthdigest при работе в многопоточном сервере...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

CVE-2026-46587

camel-couchbase CCB Header Injection Reproducer CVE-2026-46587 Этот проект демонстрирует инъекцию заголовков сообщений в компонент camel-couchbase Apache Camel, отслеживаемую как CVE-2026-46587. Компонент считывает несколько заголовков Exchange для управления своим поведением — CCBKEY ключ...

Log4Shell-CVE-2021-44228-Demo

Démo Log4Shell CVE-2021-44228 Configuration de l'environnement Client N'importe où avec la capacité d'accéder au serveur HTTP via la ligne de commande curl Application vulnérable via le serveur HTTP avec log4j Instance EC2 Amazon Linux 2 basé sur x86 / Machine virtuelle CentOS Azure $ yum install...

cpx_proftpd

cpxproftpd PoC par Daniel Aldana pour l'exploitation de CVE-2015-3306. Bogue signalé par Vadim Melihow. MÉTHODE 1 : utilisation : python cpxproftp.py ex : python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt puis essayez : http://127.0.0.1/pass.txt MÉTHODE 2 : utilisation : python...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105648

The Ghost Node.js content management system is vulnerable to a validation issue in versions 6.0.9 through 6.65.0 . An unauthenticated user can abuse certain functionalities, such as Webmentions , to perform limited HTTP requests to hosts within the server's internal network on specific network co...

CVE-2026-105647

The Ghost Node.js content management system is vulnerable to a Server-Side Request Forgery (SSRF) issue in versions 6.54.1 through 6.65.0 . A validation issue allows an unauthenticated user to abuse specific functionalities, such as Webmentions , to perform limited HTTP requests to hosts within t...

CVE-2021-41773

CVE-2021-41773 C'est la première fois que j'essaie de créer un exploit pour quelque chose alors... soyez gentil 😁 Exploit Title: Apache HTTP Server 2.4.49 Path Traversal Author: 0xRar , 0xrar.net CVE: CVE-2021-41773 Version: Apache 2.4.49 Not Tested Yet Commande d'aide : python3 exploit.py -h...

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise 사전 인증 RCE 실습 환경 PostgreSQL 사이드카를 통한 인증 없는 임의 파일 생성 및 잘라내기 CVSS 9.8 · 치명적Critical · CWE-306 · 활발히 악용 중 CISA KEV ⚠️ 면책 조항 이 저장소는 교육 및 승인된 보안 연구 목적으로만 엄격히 제공됩니다. 모든 테스트는 본인이 소유했거나 명시적 서면 허가를 받은 인프라에 대해서만 수행해야 합니다. 저자는 여기에 시연된 기법이나 도구의 오용에 대해 어떠한 책임도 지지 않습니다. 소유하지 않은...

mass_cve-2021-41773

masscve-2021-41773 МАССОВЫЙ CVE-2021-41773 Скриншот Использование ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Примечание ! результаты будут автоматически сохранены в vuln.txt вы можете добавить общий каталог на...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both Transfer-Encoding: chunked and Content-Length headers. While Netty correctly strips the conflicting Content-Length header for HTTP/1.1 messages, thi...

Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Участники Ли Хи Су @lheeeesoo Apache HTTP Server 2.4.49 содержит уязвимость: в процессе нормализации URL-путей сервер не блокирует должным образом закодированные пути верхнего уровня. Используя такие значения, как .%2e, атакующий может выйти за...

CVE-2026-105636 Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhooktask.py calls requests.post without allowredirects=False and does not validate redirect targets. validateurl blocks private, loopback, link-local, and reserved addresses in...