lbmap

Scripts de prueba de concepto para fingerprinting HTTP avanzado, presentados en OWASP AppSecAsia 2012. Estos scripts deben considerarse PoC o calidad alfa. Se agradecen sugerencias, recomendaciones, firmas, parches y críticas a través de http://www.github.com/wireghoul/lbmap. Se incluyen las...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example:...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

CVE-2021-26855-PoC

CVE-2021-26855-PoC Código de exploit PoC para CVE-2021-26855. El código original fue desarrollado por https://github.com/GreyOrder. CVE-2021-26855 ssrf uso simple de ejercicios golang Versión afectada root@kitploit: Exchange Server 2013 es menor que CU23 Exchange Server 2016 es menor que CU18...

vc5

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

CVE-2024-7591-PoC

CVE-2024-7591-PoC Estos scripts PoC en Python prueban el Kemp LoadMaster para detectar ejecución remota de código. ESTA HERRAMIENTA ESTÁ DISEÑADA SOLO CON FINES DE PRUEBA Estos scripts se basaron en el artículo de Marius Walter sobre los detalles de este exploit. Puedes leer su publicación en:...

LHF

Codacy Badge 此工具仅在最新的Kali Linux发行版上测试过 LHF: Low Hanging Fruit - 一款渗透测试侦察工具 安装依赖： ./Install.sh 启动： ./LHF.py root@kitploit: + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlist is decompressed! - Please enter the ip to scan example 192.168.0.1 or target.co...

CVE-2019-20372

Poc for CVE 2019-20372 [email protected] Description NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

Identificador-CVE-2018-11759

Otro idioma git - pt-BR Comprueba si tus instancias están expuestas al CVE 2018-11759 El archivo main es un script en bash para explotación. Las URLs deben usar el protocolo y dirección completa, ejemplo: https://test.site.com.br Para más URLs en una consulta, se puede usar el here-document,...

Astra Linux – Vulnerability in Tomcat9

Occasional URL redirection to untrusted sites is a vulnerability in Apache Tomcat, caused by the LoadBalancerDrainingValve. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.18, 10.1.0-M1 through 10.1.52, 9.0.0.M23 through 9.0.115, and 8.5.30 through 8.5.100. Other,...

RLSA-2026:55859 Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, aws-load-balancer-controller...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: dkron, omnictl-multiarch, grafana-operator, victorialogs-fips, amazon-k8s-cni-fips, aws-load-balancer-controller-fips, flux-helm-controller, pgwatch, flux-operator, metacontroller, grafana-operator-fips, flux-image-reflector-controller, temporal-fips, podinfo,...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k3s, fuse-overlayfs-snapshotter, runc, wuzz, k8s-device-plugin, aws-load-balancer-controller, gitness...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k3s, fuse-overlayfs-snapshotter, runc, wuzz, k8s-device-plugin, aws-load-balancer-controller, gitness...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...