CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – Confusione del tunnel CONNECT HTTP/2 di libcurl Codice del programma simulazione in C root@kitploit: // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Sfruttamento del Buffer Overflow di Apache modlua 📋 Panoramica Apache modlua Buffer Overflow Exploitation è una piattaforma di sfruttamento avanzata, di livello enterprise, per - una vulnerabilità critica di buffer overflow nel modulo di Apache HTTP Server 2.4.x. Questo...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Consegna del profilo MDM iOS su HTTP Codice del programma Server MDM Python Flask root@kitploit: mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS Codice del programma client + server Python/http2 root@kitploit: http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET,...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – Avvelenamento della cache HTTP tramite parametro di query non incluso nella chiave Panoramica Una cache web utilizza solo il percorso dell'URL come chiave della cache, ignorando i parametri di query. Un attaccante può aggiungere un payload dannoso a un parametro non incluso nella...

CVE-2022-31813

Avvia il campo di tiro docker compose up --build Accesso normale root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

CVE-2026-82276 StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...

CVE-2026-82263

Logto through 1.42.0 is affected by a server-side request forgery (SSRF) in the OIDC SSO connector creation endpoint . The root cause is a failure to validate the issuer URL parameter, allowing tenant administrators holding Management API credentials to supply arbitrary internal URLs that trigger...

CVE-2026-19412

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

CVE-2026-23918

CVE-2026-23918: Apache HTTP/2 Double-Free DoS CVE-2026-23918 | Apache HTTP Server 2.4.66 | CWE-415: Double Free | CVSS 8.8 | Behoben in 2.4.67 Eine Double-Free-Schwachstelle in modhttp2 h2mplx.c ermöglicht es entfernten Angreifern, über schnelle RSTSTREAM-Frames einen Denial of Service Absturz de...

CVE-2026-22812

🔐 CVE-2026-22812 - Servidor HTTP Não Autenticado do OpenCode → Execução Remota de Código RCE Aviso de segurança, análise técnica, orientações de detecção e notas de mitigação para CVE-2026-22812 📌 Visão Geral CVE-2026-22812 é uma vulnerabilidade de Execução Remota de Código RCE de alta gravidade...

CVE-2026-54745

Kubeflow Pipelines prior to 2.17.0 is affected by an unauthenticated SSRF vulnerability in the frontend /_proxy/ route (proxy-middleware.ts). The _routePathWithReferer() function forwards an attacker-controlled HTTP/HTTPS origin to createProxyMiddleware without a host allowlist or filtering for l...

CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilità critica di bypass dell'autenticazione 🧾 Riepilogo 🔥 Una vulnerabilità di gravità massima 10.0 che consente accesso remoto non autenticato ai sistemi middleware Oracle. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

CVE-2026-35616-check

Strumento di valutazione della vulnerabilità CVE-2026-35616 Rileva in sicurezza se un server FortiClient EMS è vulnerabile a CVE-2026-35616 senza causare alcuna interruzione. Consulta l'analisi completa sul blog di Bishop Fox. Descrizione CVE-2026-35616 è un bypass API pre-autenticazione in...

CVE-2026-32136_exploit

CVE-2026-32136exploit - Bypass de Autenticação via Upgrade h2c no AdGuard Home Bypass de autenticação não autenticada no AdGuard Home 0.107.73 via upgrade HTTP/2 em texto claro h2c. | ---|--- CVE| CVE-2026-32136 CVSS| 9.8 Crítico — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-287 Autenticação...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

CVE-2026-23744-PoC

Beschreibung MCPJam Inspector ist die Local-First-Entwicklungsplattform für MCP-Server. Die Versionen 1.4.2 und früher sind anfällig für eine Schwachstelle zur Remote-Code-Ausführung RCE, die es einem Angreifer ermöglicht, eine manipulierte HTTP-Anfrage zu senden, die die Installation eines...

sjcam

Lelouch: Pesquisa de Firmware e Firmware Customizado para a SJCAM SJ4000 Switch to English version Notas de engenharia reversa, ferramentas para firmware, código de prova de conceito e uma interface de firmware customizada para a versão Allwinner V3 da SJCAM SJ4000 Air. Artigo da pesquisa Este...

CVE-2021-24762

Panoramica Questo repository documenta il rilevamento di CVE-2021-24762, una vulnerabilità identificata su un'istanza WordPress tramite scansione HTTP. La vulnerabilità è stata scoperta sull'endpoint AJAX di WordPress: /wp-admin/admin-ajax.php Questo endpoint è comunemente utilizzato da plugin e...