CVE-2024-51358

CVE-2024-51358: SSRF nell'applicazione Heimdall È stata scoperta una vulnerabilità di server-side request forgery SSRF in Heimdall versione 2.6.1, in particolare nella funzionalità Add Application. Questa falla consente ad attaccanti remoti di effettuare richieste HTTP. Riferimenti: Repository...

CVE-2026-82255 gitoxide 0.25.4 HTTP Credential Leak via Redirect

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

EUVD-2026-67581

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

CVE-2026-82255

gitoxide versions from 0.25.4 contain an HTTP credential leak in the curl-based transport backend . The root cause is that credential validation checks the original URL rather than the effective URL after a redirect, allowing credentials to be sent to attacker-controlled destinations via cross-do...

CVE-2026-82247 gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

CVE-2026-82247

CVE-2026-82247 affects the gix-url crate (≤ 0.32.0) within the gitoxide Rust library. Its hand-rolled URL parser fails to treat ? or # as authority terminators per RFC 3986 , causing gix-transport 's HTTP redirect identity guard (can_reuse_identity) to compare the wrong host and fail open . An at...

CVE-2026-82247 gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

EUVD-2026-67699

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

S2-046_S2-045_POC

S2-046POC Utilizzo: root@kitploit: ./s2046.sh url ./s2045.sh url Esempio: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action RISULTATO: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...

CVE-2023-3519

CVE-2023-3519 Scanner para NetScaler Citrix ADC CVE-2023-3519 Um scanner simples para encontrar netscalers e verificar a data da última modificação no cabeçalho da resposta HTTP Este projeto é um scanner feito por mim em C usando o código-fonte de mrr3b00t em powershell...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 – D-Link Remotecodeausführung RCE 💥 Eine kritische Sicherheitslücke, klassifiziert als CVE-2024-3273, wurde in mehreren D-Link-NAS-Geräten entdeckt, darunter DNS-320L, DNS-325, DNS-327L und DNS-340L, bis zum Datum 20240403. Diese Sicherheitslücke betrifft eine unbekannte Funktion de...

CVE-2023-3519-BackdoorCheck

cve-2023-3519-citrix-scanner Questo script è uno scanner Citrix di base per CVE-2023-3519. Cerchiamo di identificare gateway/ADC Citrix vulnerabili osservando gli header HTTP. Come funziona Durante la nostra analisi di questa vulnerabilità, noi e i nostri amici del CERT-Verbund abbiamo notato che...

CS4277-CVE-Path-Traversal-Apache-HTTP-Server

CS4277-CVE-Path-Traversal-Apache-HTTP-Server Teammitglieder: Emily Nguyen, Jonathan Kim, Joon Jang Projekt-Themenauswahl: Projekt 1: Nachbildung und Ausnutzung einer realen CVE: Path Traversal CVE-2021-41773 im Apache HTTP Server. Projektziel: Wir möchten CVE-2021-41773 reproduzieren, um unser...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Versioni interessate: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename plugins-lst predefiniti root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gau...

CVE-2021-26084

uso: python poc.py http://host:port/...

Apache-Pluto-3.0.0--CVE-2018-1306

CVE-2018-1306 Apache Pluto 3.0.0 Problem in der Autorisierungslogik, das es einem Angreifer ermöglicht, bösartige Dateien durch Manipulation von HTTP-Methoden hochzuladen. Skript geschrieben in python3. Verwendung: python3 ./plutorce.py http://192.168.0.1/ webshell.jsp...

cve-2021-41773

CVE-2021-41773 – Rapporto Path Traversal di Apache Riepilogo Vulnerabilità trovata nella versione 2.4.49 di Apache HTTP Server che, a seconda della configurazione del server web, può esporre file sensibili del sistema tramite un attacco di Path Traversal Path Traversal: un attaccante può accedere...

CVE-2024-24549

Apache Tomcat DoS Exploit CVE-2024-24549 Descrizione Questo repository contiene un exploit di prova di concetto PoC per un attacco di denial of service DoS contro Apache Tomcat versione 9.0.83 , basato su un problema identificato nella gestione delle intestazioni HTTP e dei payload. Questo script...

CVE-2022-37177

CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm Quando si visita il link di invito al colloquio che HireVue fornisce per un colloquio, si viene indirizzati a una pagina con i termini, in cui si accettano i termini prima di iniziare il processo di colloquio registrato e a tempo...

CVE-2021-41773

CVE-2021-41773 È stata riscontrata una vulnerabilità in una modifica apportata alla normalizzazione dei percorsi in Apache HTTP Server 2.4.49-2.4.50. Un attaccante potrebbe utilizzare un attacco di path traversal per mappare gli URL a file al di fuori della document root prevista. Se i file al di...