45 matches found
abdal-anydesk-remote-ip-detector
AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Translation English Deutsch فارسی 📸 Screenshot 🎥 Proof of Concept Videos To see the AnyDesk IP Leak Vulnerability in action, you can download the PoC demonstration videos below: 📥 Download Proof 01 📥 Download Proof 02 Recommended - 📥 Download...
CVE-2017-7529
Nginx Integer Overflow Vulnerability CVE-2017-7529 Vulnerability Information When using the nginx standard module, an attacker can obtain cache file header information in the response by sending a header request containing a maliciously crafted range field. In certain configurations, the cache fi...
CVE-2017-7529-POC
CVE-2017-7529-POC Vulnerability Impact This vulnerability affects all Nginx default configuration modules from version 0.5.6 to 1.13.2. An attacker only needs to enable caching to send malicious requests for remote attacks, causing information disclosure. When the Nginx server uses a proxy cache,...
webrtc-ips
用于 WebRTC 的 STUN IP 地址请求 演示:https://diafygi.github.io/webrtc-ips/ 功能说明 Firefox 和 Chrome 已实现 WebRTC,允许向 STUN 服务器发出请求,这些请求将返回用户的本地和公网 IP 地址。这些请求结果对 javascript 可用,因此你现在可以在 javascript 中获取用户的本地和公网 IP 地址。此演示是该功能的一个示例实现。 此外,这些 STUN 请求是在正常的 XMLHttpRequest 流程之外发起的,因此它们在开发者控制台中不可见,也无法被 AdBlockPlus 或 Ghoste...
cve-2024-56800-poc
cve-2024-56800 POC 参考 https://nvd.nist.gov/vuln/detail/CVE-2024-56800 https://github.com/firecrawl/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec https://github.com/firecrawl/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 脆弱性 Firecrawlは、Webページのコンテンツを抽出できるWebスクレイパーです。...
cloud-buster
Cloudflare Resolver A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks. It's filled with awesome features! scan a wide array of miss-configuration and vulnerabilities search other IP resolution service databases detail origin and related services IPs smart engin...
MAL-2026-10734 Malicious code in infrastructure-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64169ae87d8d9eaad199be028a70610f025f61e0c947838c05c24a1dd4d5578 package.json declares a preinstall lifecycle script that runs node -e to issue an HTTP GET to a Burp Collaborator subdomain at...
CVE-2021-22169
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988973)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988973 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubpro...
EUVD-2019-7217
Malware in sbrugna...
EUVD-1999-1270
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-10087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the...
Linux Distros Unpatched Vulnerability : CVE-2020-35111
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content canno...
CVE-2019-16651
An issue was discovered on Virgin Media Super Hub 3 based on ARRIS TG2492 devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user if they are using certain VPN implementations, this would...
CVE-2025-23073 API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...
CVE-2024-52940
AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID...
Exploit for CVE-2024-52940
AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Tra...
BIT-GITLAB-2021-22169
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...
DoLogin Security < 3.7.1 - Subscriber+ IP Address leak
Description The plugin does not restrict the access of a widget that shows the IPs of failed logins to low privileged users. Just login to subscriber account and go to: http://localhost/wp-admin/index.phplog...
AtlasVPN Linux Client 1.0.3 IP Leak Vulnerability
Remote disconnect exploit for AtlasVPN Linux client version 1.0.3 that will allow a remote website to extract a client's real IP address. The following is my 0day. This code, when executed on any website, disconnects the AtlasVPN linux client and leaks the users IP address. I am not yet aware of ...