CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

LHF

Codacy Badge This has been only tested on the newest Kali Linux Distro LHF: Low Hanging Fruit a recon tool for penetration testing To install dependencies: ./Install.sh To start: ./LHF.py + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlist is...

vc5

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example: Call...

EUVD-2026-92020

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...

CVE-2026-105116

OpenAM versions prior to 16.1.3 are affected by a latent cross-site scripting (XSS) defect. The vulnerability occurs because the SAML message , relay state , and target URL are placed unencoded into the load-balancer cookie bounce auto-submit page. If the cookieHashRedirectEnabled setting is acti...

lbmap

Proof of concept скрипты для продвинутого HTTP-фингерпринтинга, представленные на OWASP AppSecAsia 2012. Эти скрипты следует рассматривать как PoC или альфа-версию. Предложения, рекомендации, сигнатуры, патчи и флейм приветствуются через http://www.github.com/wireghoul/lbmap. Включены следующие...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

CVE-2021-26855-PoC

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. CVE-2021-26855 ssrf simple use of golang exercises Affected version Exchange Server 2013 is less than CU23 Exchange Server 2016 is less than CU18 Exchange Server 2019 is less than...

CVE-2024-7591-PoC

CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadMaster for remote code execution. THIS TOOL IS INTENDED FOR TESTING PURPOSES ONLY These scripts were based on Marius Walter's writeup on the specifics of this exploit. You can read their post at:...

Rocky Linux 9 [CIQ] Security Update: mod_proxy_cluster / mod_proxy_cluster-debuginfo / etc (crlba-2025_2973)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20252973 advisory. The modproxycluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Bug Fixes: Rebuild modproxycluster against httpd 2.4.62...

CVE-2019-20372

Poc for CVE 2019-20372 [email protected] Description NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example: Call...

UBUNTU-CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...

CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...

CVE-2026-81626

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...

EUVD-2026-83304

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...

CVE-2026-81626

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) in the Load Balancer Groups component . An unauthenticated attacker can inject SQL statements through the Load Balancer Servlet endpoint over the network, requiring no user interaction or prior authentication....

CVE-2026-81626 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...

CVE-2026-81626 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...