67 matches found
IPRotate_Burp_Extension
IPRotateBurpExtension Estensione per Burp Suite che utilizza AWS API Gateway per cambiare il tuo IP ad ogni richiesta. Maggiori informazioni: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Nota/Attenzione Questo metodo di utilizzo di AWS API Gateway per offuscare l'IP di origine è or...
fail2ban
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: blocca gli host che causano multipli errori di autenticazione Fail2Ban analizza i file di log come /var/log/auth.log e blocca gli indirizzi IP che effettuano troppi tentativi di accesso falliti. Lo fa...
IPBan
IPBan - Software gratuito per bloccare rapidamente e facilmente gli aggressori su Linux e Windows Link utili Ottieni uno sconto su IPBan Pro visitando https://ipban.com/upgrade-to-ipban-pro/. Integra IPBan con IPThreat, un sito web e servizio completamente gratuito di indirizzi IP dannosi segnala...
crowdsec
CrowdSec ist eine Open-Source- und partizipative Sicherheitslösung, die gemeinschaftlich betriebene Servererkennung und Schutz vor bösartigen IPs bietet. Erkenne und blockiere mit unserer Sicherheits-Engine, trage zum Netzwerk bei und profitiere von unserer Echtzeit-Community-Blocklist. Funktione...
firecall
firecall Automatisieren Sie die SSH-Kommunikation mit Firewalls, Switches usw. Beschreibung Diese Skripte wurden entwickelt, um das Senden von Befehlen an eine Cisco ASA-Firewall zu automatisieren. Der beabsichtigte Zweck besteht darin, die manuelle Anmeldung an einer Firewall für Änderungen zu...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes अपने नोड CVE-2018-17144 से सभी सेवा-निषेध-हमला भेद्यता शोषण योग्य नोड्स पर प्रतिबंध लगाएं bash स्क्रिप्ट ban.sh के लिए आवश्यकताएँ कमांड-लाइन JSON प्रोसेसर jq डेबियन-आधारित लिनक्स पर इंस्टॉल करें root@kitploit: sudo apt-get install jq स्क्रिप्ट डाउनलोड करें और उपयोग...
CVE-2026-46415 Caddy Defender trusted proxy client IP bypass
The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...
PYSEC-2026-2458 docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...
CVE-2026-34170
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp apiurl field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...
CVE-2026-34170 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp apiurl field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...
CVE-2026-34170 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp apiurl field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...
CVE-2026-48172
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...
CVE-2026-48172
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...
CVE-2026-33060 CKAN MCP Server: SSRF via base_url allows access to internal networks
CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckanpackagesearch and sparqlquery that accept a baseurl parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to...
CVE-2026-27023
Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but did not validate redirect targets. An authenticated user who could control outbound request URLs e.g., webhook endpoints, image URLs could bypass...
cybersec-ids
cybersec-ids Full-stack AI-driven Web App Intrusion Detection...
EUVD-2018-13342
Malware in sbrugna...
EUVD-2011-4517
Malware in sbrugna...