CVE-2026-48830 Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests

Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP endpoints by first sending a builtin HTTP request on the same HTTP/1.1 keep-alive connection. When ServerOptions.auth is enabled and builtin HTTP...

CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit Exploit for the critical vulnerability CVE-2024-51996 , which allows authentication bypass in Symfony applications that use the Remember Me mechanism. 🧠 Impact : Impersonation of privileged users such as admin without the need for valid...

CVE-2019-19781-poc

CVE-2019-19781-poc Modified PoC, suitable for Python3 python3 CVE-2019-19781.py http://example.com...

Jenkins-CVE-2024-23897-Lab

Jenkins CVE-2024-23897 Lab Arbitrary file read vulnerability in Jenkins 2.441 and earlier. Launch docker-compose up -d Automated Attack docker exec -it attacker-host ./auto-exploit.sh Manual Attack docker exec -it attacker-host bash cd /tmp curl -o jenkins-cli.jar...

CVE-2026-57487

A flaw was found in libupnp. The HTTP parser fails to enforce configured message size limits when processing chunked transfer-encoded HTTP requests. A remote attacker can exploit this vulnerability by sending an excessively large chunked payload, forcing the application to buffer data beyond...

CVE-2025-31650

Apache Tomcat 10.1.39 - Denial of Service DoS This tool performs a high-volume, asynchronous HTTP/2 request flood using malformed priority headers to test the stability of Apache Tomcat servers running version 10.1.10 to 10.1.39. ⚠️ This is strictly for educational and research purposes only. ❌ Th...

CVE-2023-3519

CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 Scanner A simple scanner to find netscalers and look at the las modified date on the HTTP header response this project is a scanner made by me in C using the source-code of mrr3b00t in powershell...

bash-CVE-2017-17562

bash-CVE-2017-17562 An PoC implementation in Bash for CVE-2017-17562. Requires curl for crafting HTTP requests. Based on Metasploit and @fssecur3 implementations. Arguments The following arguments need to be set as they are required for reconnaissance + payload send: $1: IP/Host of remote...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: python cpxproftp.py ex: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: http://127.0.0.1/pass.txt METHOD 2: usage: python cpxproftp.py ex: python cpxproftp.py...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

CVE-2025-49132_poc

CVE-2025-49132 PoC Improved This is an improved version of the CVE-2025-49132 proof of concept exploit. CVE Information CVE ID : CVE-2025-49132 NVD Reference : https://nvd.nist.gov/vuln/detail/cve-2025-49132 Wiz Database : https://www.wiz.io/vulnerability-database/cve/cve-2025-49132 Original Work...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.52 security and extras update

Red Hat OpenShift Container Platform release 4.19.52 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

CVE-2019-16724

Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...

RCE_CVE-2024-7954-

RCECVE-2024-7954- The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit: POST...

CVE-2018-5354

CVE-2018-5354 ANIXIS Password Reset Client Privilege Escalation/RCE Information Vendor: ANIXIS Product: ANIXIS Password Reset Client Versions Affected: Before version 3.22 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The custom GINA/CP module in...

CVE-2024-38856

CVE-2024-38856 Apache Ofbiz RCE Scanner Description This script is designed to scan for the CVE-2024-38856 vulnerability in Apache Ofbiz applications, which may allow for remote code execution. It sends HTTP POST requests to specific paths within the Ofbiz application with malicious payloads to...

CVE-2024-38472

Creating a Remote Code Execution RCE Metasploit module for the SSRF vulnerability CVE-2024-38472 in Apache HTTP Server on Windows is challenging because SSRF itself doesn't directly result in RCE. However, SSRF can often be a step toward achieving RCE, especially if you can use it to interact wit...

Log4Shell-CVE-2021-44228-Demo

Log4ShellCVE-2021-44228 Demo Environment Setup Client Anywhere that with ability to access the HTTP Server with curl command line Vulnerable App by Http Server with log4j Amazon Linux 2 x86 based EC2 Instance / CentOS Azure Virtual Machine $ yum install docker -y $ systemctl enable docker $...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...