webrtc-ips

Solicitudes de direcciones IP STUN para WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Qué hace esto Firefox y Chrome han implementado WebRTC, que permite realizar solicitudes a servidores STUN que devuelven las direcciones IP locales y públicas del usuario. Los resultados de estas solicitude...

abdal-anydesk-remote-ip-detector

AnyDesk IP 泄露漏洞 CVE-2024-52940 🎤 README 翻译 English Deutsch فارسی 📸 截图 🎥 概念验证视频 要观看 AnyDesk IP 泄露漏洞 的实际效果，可以下载以下 PoC 演示视频： 📥 下载验证 01 📥 下载验证 02 推荐 - 📥 下载验证 03 这些视频展示了该漏洞的运行方式，说明了其对 IP 地址隐私的影响和步骤。 💎 简介 Abdal AnyDesk 远程 IP 检测器 是一个概念验证 PoC 工具，利用 AnyDesk 的 "允许直接连接" 功能中于 2024 年 10 月 27 日 发现的一个 零日漏洞...

CVE-2017-7529

Nginx整数溢出漏洞 CVE-2017-7529 漏洞信息 当使用nginx标准模块时，攻击者可以通过发送包含恶意构造 range 域的 header 请求，来获取响应中的缓存文件头部信息。在某些配置中，缓存文件头可能包含后端服务器的IP地址或其它敏感信息，从而导致信息泄露。 参考：【漏洞分析】Nginx range 过滤器整形溢出漏洞 CVE–2017–7529预警分析 漏洞影响 该漏洞影响所有 0.5.6 - 1.13.2版本内默认配置模块的Nginx只需要开启缓存攻击者即可发送恶意请求进行远程攻击造成信息泄露。...

CVE-2017-7529-POC

CVE-2017-7529-POC Descripción de la vulnerabilidad Esta vulnerabilidad afecta a todas las versiones de Nginx entre la 0.5.6 y la 1.13.2 que tengan activado el módulo de configuración por defecto. Basta con que el servidor tenga habilitado el almacenamiento en caché para que un atacante pueda envi...

cve-2024-56800-poc

cve-2024-56800 POC 参考 https://nvd.nist.gov/vuln/detail/CVE-2024-56800 https://github.com/firecrawl/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec https://github.com/firecrawl/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 漏洞 Firecrawl 是一个网页爬虫，允许用户提取网页内容。 1.1.1 之前的版本存在服务器端请求伪造（SSRF）漏...

cloud-buster

Cloudflare Resolver 一个全面的渗透测试工具，用于检测启用Cloudflare的网站是否存在源IP泄露问题。 它充满了出色的功能！ 扫描各种配置错误和漏洞 搜索其他IP解析服务数据库 详细展示源IP及相关服务的IP 智能引擎确认匹配结果 多种命令行参数用于自定义和微调 支持目标列表实现自动化扫描 警告 我已离开黑客圈，因此归档了这个项目。它仍然很棒，你可以继续使用和Fork。 依赖项 Python 3.5 dnspython3 1.14.0 libssl openssl 使用方法 基本用例 简单（快速）扫描：python3 bust mydomain.com...

MAL-2026-10734 Malicious code in infrastructure-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64169ae87d8d9eaad199be028a70610f025f61e0c947838c05c24a1dd4d5578 package.json declares a preinstall lifecycle script that runs node -e to issue an HTTP GET to a Burp Collaborator subdomain at...

CVE-2021-22169

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988973 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubpro...

EUVD-2019-7217

Malware in sbrugna...

EUVD-1999-1270

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-10087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the...

Linux Distros Unpatched Vulnerability : CVE-2020-35111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content canno...

CVE-2019-16651

An issue was discovered on Virgin Media Super Hub 3 based on ARRIS TG2492 devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user if they are using certain VPN implementations, this would...

CVE-2025-23073 API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2024-52940

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID...

Exploit for CVE-2024-52940

AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Tra...

BIT-GITLAB-2021-22169

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...

DoLogin Security < 3.7.1 - Subscriber+ IP Address leak

Description The plugin does not restrict the access of a widget that shows the IPs of failed logins to low privileged users. Just login to subscriber account and go to: http://localhost/wp-admin/index.phplog...

AtlasVPN Linux Client 1.0.3 IP Leak Vulnerability

Remote disconnect exploit for AtlasVPN Linux client version 1.0.3 that will allow a remote website to extract a client's real IP address. The following is my 0day. This code, when executed on any website, disconnects the AtlasVPN linux client and leaks the users IP address. I am not yet aware of ...