Iot_Hacking_Camera_0day

IotHackingCamera0day Fotocamera IoT 0day AHD DVR ADN-448 è soggetto a un buffer overflow non autenticato sull'interfaccia http. Basta navigare sull'interfaccia del server web e inserire una stupida quantità di dati nel nome utente e nella password, e guarda come la fotocamera si riavvia. Per favo...

DEBIAN-CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59298

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

feroxfuzz

🚀 FeroxFuzz 🚀 Eine strukturbewusste HTTP-Fuzzing-Bibliothek...

RustTLSX

RustTLSX 🦀 . Ein fortschrittlicher Stealth-HTTP-Client für Rust. Entwickelt für datenschutzbewusste Entwickler, die volle Kontrolle über ihren Netzwerk-Fingerprint benötigen. Sieht aus wie ein Browser. Verhält sich wie ein Browser. Geschrieben in Rust. Credits & Grundlage Basiert...

burp-jq

Burp JQ هذا امتداد لـ Burp لتطبيق استعلامات jq على محتوى JSON من عارض رسائل HTTP. البناء root@kitploit: $ gradle fatJar الاعتمادات يعتمد Burp JQ على jackson-jq، وهو تطبيق Java لـ jq. jq jackson jackson-jq...

CVE-2021-41773

CVE-2021-41773 Vulnerabilità di path traversal e divulgazione di file in Apache HTTP Server 2.4.49 Utilizzo root@kitploit: python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Riferimenti...

RTSPServer-Code-Execution-Vulnerability

Live Networks LIVE555-Streaming-Media-RTSPServer: Schwachstelle zur Codeausführung in lookForHeader CVE-2018-4013 Zusammenfassung In der HTTP-Paketparsing-Funktion der LIVE555-RTSP-Serverbibliothek existiert eine ausnutzbare Schwachstelle zur Codeausführung. Ein speziell präpariertes Paket kann...

c2finder

c2finder Disclaimer obbligatorio: non sono affatto un programmatore esperto, quindi questo è uno script molto semplice. Non fare affidamento su di esso per essere perfetto. Sono comunque aperto a feedback o idee per miglioramenti : Descrizione Questo script scarica la lista principale C&C da...

martian

Martian Proxy Martian Proxy ist ein programmierbarer HTTP-Proxy, der für Tests entwickelt wurde. Martian ist ein großartiges Werkzeug, wenn Sie: Überprüfen, dass alle oder ein Teil der Anfragen sicher sind Externe Dienste auf Netzwerkebene simulieren mocken Header einfügen, Cookies ändern oder...

CVE-2019-19781-poc

CVE-2019-19781-poc PoC modificato, adatto per python3 python3 CVE-2019-19781.py http://example.com...

CVE-2004-2271-MiniShare-1.4.1-BOF

CVE-2004-2271 - MiniShare 1.4.1 - BOF Riferimenti https://nvd.nist.gov/vuln/detail/CVE-2004-2271 Vulnerabilità MiniShare 1.4.1 non esegue alcun controllo dei limiti sulle richieste HTTP GET che riceve. Inviando una richiesta HTTP GET lunga e malformata, un attaccante può provocare un buffer...

nodejs-http-transfer-encoding-smuggling-poc

nodejs-http-transfer-encoding-smuggling-poc PoC von HTTP Request Smuggling in Node.js CVE-2020-8287 src/index.js root@kitploit: header: 'Host', '127.0.0.1', 'Transfer-Encoding', 'chunked', 'Transfer-Encoding', 'eee' , body: 'A' header: 'Host', '127.0.0.1' , body: '' data: 'HTTP/1.1 200 OK\r\n' +...

cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Analyse de sécurité Aperçu Ce projet est une analyse technique de CVE-2025-55182, une vulnérabilité critique d'exécution de code à distance RCE divulguée en décembre 2025. La vulnérabilité affecte les composants serveur React et permet aux attaquants d'exécuter du cod...

CVE-2026-59314

Spring Framework spring-web is vulnerable to HTTP response splitting when untrusted input is used to build a Content-Disposition header value. An attacker can inject malicious characters via specially crafted file names to break HTTP headers or corrupt the framing of an outbound multipart body. T...

CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

EUVD-2026-67196

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59314 Spring Framework response splitting in ContentDisposition

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59298 Potential for improper filtering of HTTP headers in Spring Cloud Function

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...