CypherDog

CypherDog4.3 PoSh BloodHound Hundeflüsterer a.k.a. PowerShell-Cmdlets zur Interaktion mit BloodHound-Daten über die Neo4j-HTTP-API Kompatibel mit Bloodhound 4.3+ und neo4j 4.4+...

CVE-2026-55484

creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:02+00:00| published-proof-of-concept| https://github.com/guno1928/alos-http/security/advisories/GHSA-hr6j-w4mw-g9mj 2026-08-30 12:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucdu5szdq27...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini che sono stati presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutare a riportarli a...

CVE-2026-76651

A buffer overflow in the embedded HTTP service of the TP-Link TL-WR841N v14 is triggered when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter allows a remote, unauthenticated attacker from the adjacent network to corrupt memory beyond ...

CVE-2026-55484

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

slinger

slinger投石器 Un client HTTP per Rust progettato per hacker. Esplora la documentazione » · ·...

CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Dipartimento Cybersecurity ITSOLERA — Red Team Task 3 Team: Offensive Team Zeta Data: 18 marzo 2026 ⚠️ Disclaimer Questo repository è solo a scopo educativo. Tutti i test sono stati eseguiti in un laboratorio Docker locale isolato. No...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

apache-web-log-analysis-lab

Apache Web Log Analysis Lab Lab Blue Team focalizzato sull'analisi dei log del server HTTP Apache per rilevare attività di scansione web, enumerazione delle directory e tentativi di path traversal. Obiettivo Installare ed esporre un server web Apache in un ambiente di laboratorio isolato, simular...

GHSA-HR6J-W4MW-G9MJ alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Summary A single unauthenticated HTTP request to a path starting with ? e.g. GET ? HTTP/1.1 crashes the entire server process. The request line parser passes the path to sanitizeRequestPath which indexes the first byte of the path after stripping the query string. It does so without checking that...

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Summary A single unauthenticated HTTP request to a path starting with ? e.g. GET ? HTTP/1.1 crashes the entire server process. The request line parser passes the path to sanitizeRequestPath which indexes the first byte of the path after stripping the query string. It does so without checking that...

CVE-2026-55484

ALOS HTTP , a Linux-first Go web framework with a custom networking stack, is vulnerable to an unauthenticated remote denial-of-service . The root cause is an unchecked p[0] access in core/utils.go::sanitizeRequestPath after splitPathQuery processes a path beginning with a question mark, leaving ...

EUVD-2026-67872

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-56848

CVE-2026-56848 NVD-Beschreibung Ein Fehler in der HTTP/2-Verarbeitung von Node.js ermöglicht es, nghttp2sessionmemsend reentrant aufzurufen, während nghttp2sessionmemrecv ausgeführt wird, was zu einem Heap-Use-after-Free führt. Diese Schwachstelle betrifft Node.js 26.x, 24.x und 22.x. Hinweis: Di...

CVE-2023-44487

HTTP/2 Rapid Reset: CVE-2023-44487 Beschreibung Dieses Repository enthält Proof-of-Concept-Code PoC für die HTTP/2-Rapid-Reset-Schwachstelle, die als CVE-2023-44487 identifiziert wurde. Überblick über die Schwachstelle CVE-ID : CVE-2023-44487 Auswirkung : Denial of Service DoS Betroffene Protokol...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner Ein Python-basiertes Erkennungstool für CVE-2024-40725 , eine Schwachstelle zur Offenlegung von Quellcode im Apache HTTP Server, die die Versionen 2.4.0 und 2.4.61 betrifft. Rechtlicher Hinweis: Führen Sie diesen Scanner nur gegen Server aus, die Ihnen gehören oder für die...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Laboratorio Apache HTTP Server 2.4.49 Riproduzione di CVE-2021-41773 , una vulnerabilità di path traversal in Apache HTTP Server 2.4.49. Questo progetto utilizza Docker per creare un ambiente vulnerabile isolato e un PoC Python per dimostrare la divulgazione controllata di file...