cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS

यह जांच केवल प्रदर्शन के लिए है। cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS यह खोजे गए HTTP और HTTPS सेवाओं पर सीधे OpenSSL उत्पाद को लक्षित करता है। यह OpenSSL 1.0.2-beta की जाँच नहीं करता जो कमजोर है। इसके अलावा, OpenSSL आमतौर पर अन्य सॉफ्टवेयर में पैकेज किया जाता है और SSL का उपयोग करके...

react2shell-CVE-2025-55182

React2Shell शोषण CVE-2025-55182 Next.js React सर्वर घटकों की RCE कमजोरी के लिए पायथन शोषण, HTTP/HTTPS समर्थन के साथ। 🚀 त्वरित आरंभ Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 उपयोग HTTP...

PacketPirate

PacketPirate أداة MITM بروكسي بدون واجهة رسومية، قابلة للبرمجة عبر سطر الأوامر، مصممة لاعتراض حركة مرور الشبكة وتحليلها وتعديلها على أنظمة Windows. تعمل بطريقة مشابهة للبروكسيات ذات الواجهات الرسومية المعيارية في المجال، لكنها محسّنة لبيئات الأتمتة، والتشغيل بدون واجهة رسومية، والتكامل مع مسارات...

PT-2026-104655

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http connection in lib/gist.rb sets VERIFY NONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth toke...

CVE-2026-104286-POC

استغلال ثغرة اجتياز المسار FortiMail CVE-2026-104286 نظرة عامة استغلال متقدم عن بُعد بدون مصادقة لكتابة ملفات عشوائية في FortiMail عبر CVE-2026-104286. تتجاوز طلبات HTTP/HTTPS المُصممة بعناية تنقية المسار في عميل الويب، مما يتيح إنشاء ملفات عشوائية على نظام التشغيل الأساسي. يُستخدم لتقييم الفريق...

CVE-2026-13249

CVE-2026-13249 — رفع ملفات بدون مصادقة في Honeywell PD45 تنفيذ تعليمات عن بُعد RCE Python 3 PoC لـ CVE-2026-13249 — واجهة إدارة الويب لطابعة Honeywell PD45 Industrial Printer. الوصف PoCbit / GitHub CVE-2026-13249 — الإصدار الثابت F10.19.010040 حتى ما قبل F10.22.030745 يكشف عن رفع ملفات عشوائي بدو...

EUVD-2026-91837

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105049

Zilliz Attu versions prior to 3.0.0 are vulnerable to a missing authentication flaw in the Playground feature. This vulnerability allows unauthenticated attackers to proxy arbitrary HTTP and HTTPS requests to URLs on the public internet. No specific exploit details or remediation steps are provid...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

zoshrinkC2

MeliziaC2 برمجية خبيثة موجّهة تستخدم DNS عبر HTTPS تعمل مرة واحدة فقط ! بعض الوظائف غير متاحة بعد ! ! قيد التطوير، لا تستخدمها في الإنتاج ! الميزات الرئيسية حذف البرمجية الخبيثة تلقائيًا عند الفشل اتصال DoH DNS عبر HTTPS مشفّر بالكامل بمفتاح RSA خاص بكل ضحية البرمجية الخبيثة تعمل مرة واحدة فقط!...

CVE-2026-104459

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. Attackers can POST a crafted actorhandle with a numeric host and port to the abonnements view to probe internal HTTPS...

Lack of vulnerability protection in Fortinet FortiMail

Fortinet has identified a vulnerability in FortiMail. FortiMail contains a critical vulnerability CVE-2026-104286 in the processing of file paths, caused by a combination of Path Traversal CWE-22 and insufficient neutralization of NULL bytes CWE-158. An unauthorized attacker can use specially...

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The U.S. Cybersecurity and Infrastructure Security Agency CISA, on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 CVSS score: 9.8,...

CLEANSTART-2026-SE64937 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

PT-2026-104452

Name of the Vulnerable Software and Affected Versions Zilliz Attu versions prior to 3.0.0 Description The Playground feature allows the proxying of arbitrary HTTP and HTTPS requests to URLs on the public internet without requiring authentication. This leads to a Server-Side Request Forgery SSRF, ...

CVE-2026-61813

GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS...

CVE-2026-105049: Missing Authentication for Critical Function

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...