CVE-2019-20372

Poc for CVE 2019-20372 [email protected] Description NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

Identificador-CVE-2018-11759

لغة أخرى git - pt-BR تحقق مما إذا كانت نسخك معرّضة لثغرة CVE 2018-11759 الملف main هو سكربت بلغة bash للاستغلال. يجب أن تستخدم عناوين URL البروتوكول والعنوان الكامل، مثال: https://test.site.com.br لإرسال أكثر من عنوان URL في استدعاء واحد، يمكن استخدام here-document، مثال: root@kitploit: Call the...

lbmap

Scripts de prueba de concepto para fingerprinting HTTP avanzado, presentados en OWASP AppSecAsia 2012. Estos scripts deben considerarse PoC o calidad alfa. Se agradecen sugerencias, recomendaciones, firmas, parches y críticas a través de http://www.github.com/wireghoul/lbmap. Se incluyen las...

vc5

VC5 Questo README è in fase di aggiornamento per riflettere le modifiche recenti – alcune informazioni potrebbero non corrispondere al codice attuale. Questa iterazione del codice non è ancora pronta per ambienti di produzione – utilizza una release v0.2 per ambienti reali Un bilanciatore di cari...

CVE-2021-26855-PoC

CVE-2021-26855-PoC CVE-2021-26855 के लिए PoC शोषण कोड। मूल कोड https://github.com/GreyOrder द्वारा विकसित किया गया था। CVE-2021-26855 ssrf golang अभ्यास का सरल उपयोग प्रभावित संस्करण root@kitploit: Exchange Server 2013 CU23 से कम है Exchange Server 2016 CU18 से कम है Exchange Server 2019 CU7 से क...

CVE-2021-26855

CVE-2021-26855-PoC Codice PoC dell'exploit per CVE-2021-26855. Il codice originale è stato sviluppato da https://github.com/GreyOrder. Il repository originale è stato eliminato poco dopo l'aggiunta di funzionalità aggiuntive enumerazione utenti, ecc.. Se hai l'ultima versione, invia una pull...

Identificador-CVE-2018-11759

Altra lingua git - pt-BR Controlla se le tue istanze sono esposte al CVE 2018-11759 Il file main è uno script bash per l'exploit. Gli URL devono usare il protocollo e l'indirizzo completo, esempio: https://test.site.com.br Per più URL in un'unica consultazione, si può usare l'here-document,...

LHF

Codacy Badge Questo è stato testato solo sull'ultima distribuzione Kali Linux LHF: Low Hanging Fruit - uno strumento di ricognizione per penetration testing Per installare le dipendenze: ./Install.sh Per avviare: ./LHF.py root@kitploit: + Checking permissions - Rockyou wordlist is missing trying ...

CVE-2024-7591-PoC

CVE-2024-7591-PoC Estes scripts Python PoC testam o Kemp LoadMaster para execução remota de código. ESTA FERRAMENTA DESTINA-SE APENAS A FINS DE TESTE Estes scripts foram baseados no artigo de Marius Walter sobre os detalhes desta exploração. Pode ler o seu post em:...

RLSA-2026:55859 Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, aws-load-balancer-controller-fips...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver-fips, victorialogs-fips, librechat, grafana-operator, flux-notification-controller, nova, localstack, flux-helm-controller, nova-fips, flux-source-watcher, flux-image-automation-controller, amazon-k8s-cni-fips, podinfo, victoriametrics-cluster-fips...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k3s, runc...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k3s, runc...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

EUVD-2026-58115

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...