sricam-gsoap2.8-dos-exploit

sricam-gsoap2.8-dos-exploit Sricam-gSOAP2.8-DoS-Exploit Proof of Concept Proof-of-Concept-Code: SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 Thanks to the CVE Assignment Team for their help structuring the following: Beschreibung Sricam-IP-Überwachungskameras sind...

CVE-2021-40438

CVE-2021-40438 Richiesta di inoltro Apache CVE CVE-2021-40438: un uri-path di richiesta appositamente costruito può indurre modproxy a inoltrare la richiesta a un server di origine scelto dall'utente remoto. Questa vulnerabilità interessa Apache HTTP Server 2.4.48 e versioni precedenti. Questa CV...

EUVD-2026-66820

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

EUVD-2026-66831

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

EUVD-2026-66819

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

CVE-2026-23744

CVE-2026-23744 Exploit für MCPJam Inspector Installieren Sie die Bibliotheken mit: pip install -r requirements.txt - verwenden Sie python CVE-2026-23744 --help für Informationen MCPJam Inspector ist die lokale-first Entwicklungsplattform für MCP-Server. Die neuesten Versionen 1.4.2 und früher sin...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in weist eine leicht ausnutzbare, nicht authentifizierte, über das Netzwerk erreichbare Schwachstelle auf, die eine Kompromittierung über HTTP ermöglicht...

CVE-2021-4034

PwnBringer Genera automaticamente e serve PwnKit Compila il codice sorgente in binario per pwnkit e automaticamente il server python è attivo, questo è un Prototipo quindi, potrebbe non funzionare a seconda dell'ambiente. root@kitploit: chmod +x PwnBringer.py ./PwnBringer.py root@kitploit: Lato...

CVE-2021-41773-exercise

CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - Exploit LFI e RCE Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

Exploit para CVE-2021-41773 e CVE-2021-42013 Ataque de path traversal e RCE no Apache/2.4.49-2.4.50 Recursos - Aceita uma lista de URLs - Funciona tanto para CGI quanto para não-CGI - Funciona para Apache/2.4.49 - 2.4.50 Uso $ git clone...

CVE-2026-47874

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2026-47850

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

CVE-2026-47845

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 è una vulnerabilità critica nei prodotti FortiOS e FortiProxy di Fortinet, presente nel componente SSL VPN. Questa vulnerabilità consente a un attaccante remoto non autenticato di eseguire codice o comandi arbitrari sul sistema target tramite richieste HTTP...

cs2modrewrite

Genera automaticamente ruleset per Apache modrewrite o Nginx per il reindirizzamento intelligente di C2 HTTP Questo progetto converte un profilo Cobalt Strike in un file di configurazione modrewrite .htaccess o Nginx funzionante per supportare il reindirizzamento HTTP tramite reverse proxy verso ...

redi

redi Configurazione automatica del redirector compatibile con RAT HTTP CobaltStrike Beacon, meterpreter, ecc. e CobaltStrike DNS Beacon. Lo script può configurare un reverse proxy nginx oppure un proxy/forwarder DNS tramite dnsmasq. Se si seleziona HTTPS, configurerà automaticamente letsencrypt...

[SECURITY] Fedora 43 Update: libsoup3-3.6.6-4.fc43

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Exploit RCE Pre-Auth Oracle E-Business Suite Una vulnerabilità critica di Remote Code Execution RCE pre-autenticazione in Oracle E-Business Suite versioni 12.2.3–12.2.14 consente agli attaccanti di ottenere il pieno controllo dei server vulnerabili tramite richieste HTTP malevole...

CVE-2002-1120

🐞 CVE-2002-1120: Savant Web Server 3.1 - Buffer Overflow basato su stack Egghunter Classico buffer overflow basato su stack in Savant Web Server 3.1 che dimostra la corruzione della memoria remota dei primi anni 2000 attraverso una richiesta HTTP appositamente realizzata una vulnerabilità del 200...