batchql

BatchQL BatchQL è uno script di auditing di sicurezza per GraphQL con un focus sull'esecuzione di query e mutazioni GraphQL in batch. Questo script non è complesso e accogliamo con favore i miglioramenti. Quando abbiamo esplorato lo spazio dei problemi degli attacchi di batching GraphQL, abbiamo...

CVE-2024-25277

CVE-2024-25277 scoperto su MW45APT02.0002 Risorse e PoC Questo repository funge da raccolta di script e PoC raccolti durante l'analisi e la scoperta di CVE-2024-25277. Puoi leggere ulteriori informazioni sulla scoperta su:...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentifizierungsumgehung Kaiten – ein Workflow-Management-System. Eine Schwachstelle in Kaiten ermöglicht es Angreifern, den PIN-Code-Authentifizierungsmechanismus zu umgehen. Die Anwendung verlangt von Benutzern nach der Eingabe ihrer Anmeldedaten die Eingabe eines...

CVE-2026-47885

The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

CVE-2026-14840

CVE-2026-14840 — YOP Poll 7.0.6 Umgehung der Abstimmungsbegrenzung Autor: nullwhisper Verwendungszweck: ausschließlich autorisierte Sicherheitsforschung / Schwachstellenvalidierung. Was ist das? Das YOP-Poll-Plugin in Versionen 7.0.6 erzwingt eine Begrenzung von einer Stimme pro IP. Das Problem...

CVE-2021-3138

..| Discourse 2.7.0 - CVE-2021-3138 |.. 描述： 速率限制绕过，导致双因素认证绕过 测试版本： 2.7.0 攻击类型： 远程 影响： 2FA 绕过 产品供应商： https://www.discourse.org 附加信息： Discourse 是为下一个十年互联网构建的讨论平台。用作： - 邮件列表 - 讨论论坛 - 长文聊天室 还有像 Google 收购的知名公司等一直使用 Discourse 至今。 发现者： Meshal Almansour Twitter: mesh3l911...

CVE-2014-0195

XML-RPC WordPress 브루트포스 익스플로잇 스크립트 이 저장소는 CVE-2014-0195에 취약한 WordPress 인스턴스의 로그인 자격 증명을 브루트포스하기 위한 Python 기반 개념 증명PoC을 포함합니다. XML-RPC의 system.multicall 함수를 악용하여 단일 HTTP 요청 내에서 여러 로그인 시도를 수행할 수 있으며, 이로 인해 서비스 거부DoS가 발생할 수 있습니다. 이 스크립트는 사이버보안 전문가가 WordPress 설치의 보안 상태를 평가하기 위해 사용하도록 설계되었습니다. 면책 조항 이...

CVE-2016-16113-POC

Get RCE – Bludit CMS Exploit root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| Ein automatisiertes Exploitation-Tool, das CVE-2019-17240 Authentication Bypass und CVE-2019-16113 Arbitrary File Upload kombiniert, um...

goop

goop Google-Suche-Scraper Hinweis: Es funktioniert nicht mehr. Google hat mir mitgeteilt, dass es kein legitimes Problem sei, als ich es meldete, aber jetzt haben sie es stillschweigend behoben. Inhalt Einleitung Wie funktioniert es? Verwendung Installation Beispiel Rechtliches & Haftungsausschlu...

cve-2026-8697

CVE-2026-8697: Bypass del limite di tentativi di accesso su TP-Link Archer C64 CVE-2026-8697 è un difetto logico nel sistema operativo del TP-Link Archer C64 chiamato TPOS nel messaggio di debug. Consente a qualsiasi utente non privilegiato connesso al router di aggirare il limite di tentativi...

requests-ip-rotator

Orgogliosamente sponsorizzato da Swiftproxy Proxy residenziali ad alte prestazioni con un pool di oltre 80 milioni di IP in più di 195 paesi — migliora il tasso di successo delle richieste e riduce i blocchi IP durante la raccolta di dati su larga scala e l'automazione del browser. Perfetto per...

CVE-2026-78655

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2026-78655

Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...

EUVD-2026-65457

vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at request time to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, causin...

CVE-2026-78684 vLLM before 0.27.0 Denial of Service via DeepStream Backend

vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at request time to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, causin...

CVE-2026-78684 vLLM before 0.27.0 Denial of Service via DeepStream Backend

vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at request time to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, causin...

CVE-2026-78684

vLLM versions prior to 0.27.0 are susceptible to a denial-of-service condition through improper handling of the DeepStream backend. The root cause is a failure to classify DeepStream as a GPU backend combined with missing pixel-limit enforcement in the decode path. An unauthenticated attacker can...

CVE-2026-11103-GraphQL-Batching-Alias-Rate-Limit-Bypass

3. CVE-2026-11103 – Bypass do Limite de Taxa via Alias de Batching em GraphQL Código do Programa Exploit em Node.js + Python root@kitploit: // graphqlratelimitserver.js - GraphQL with naive rate limiter const express = require'express'; const graphqlHTTP = require'express-graphql'; const...

xmlrpc-brute

Ferramenta de Força Bruta WordPress XML-RPC Uma ferramenta projetada para testar sites WordPress em busca de vulnerabilidades XML-RPC, tentando forçar credenciais de usuário através da interface XML-RPC. Descrição Esta ferramenta testa instalações WordPress em busca de vulnerabilidades de...

CVE-2026-74696

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO maxqlen accounting across reuseport migration A listener's TCPFASTOPEN maxqlen stops being accurate and lets through far more pending Fast Open requests than it was configured for. This only shows up with SOREUSEPORT...