hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

burp_global_match_replace

글로벌 매치 & 리플레이스 GMR Burp Suite 확장 프로그램 글로벌 매치 & 리플레이스GMR는 Burp Suite에 매치/리플레이스 규칙을 추가하여 전역적으로 또는 선택한 여러 도구Repeater, Intruder, Proxy 등에 적용할 수 있게 합니다. 요청 및 응답별 diff를 제공하여 정확히 무엇이 변경되었는지 확인할 수 있습니다. 이 확장 프로그램은 Burp Montoya API를 사용합니다. 기능 전역 매치/리플레이스 — Burp 도구 전반Proxy뿐만 아니라에 적용 규칙 기반 엔진 — 규칙별 대상 지정요청/...

Mongoose - NoSQL Injection

NoSQL injection vulnerability in Mongoose 8.9.5 affecting the populate function's match option. This vulnerability exists due to an incomplete fix for CVE-2024-53900. While direct $where injection is blocked, attackers can bypass this protection by nesting $where operators within logical operator...

io_uring_scanner

iouring 스캐너 Rust로 작성된 iouring 기반 네트워크 스캐너입니다. 다음을 참조하세요: Rust로 iouring 기반 네트워크 스캐너 구축하기. 3가지 스캔 모드를 지원합니다: TCP connect SSH 버전 매칭 정규 표현식 매칭 HTTP 헤더 매칭 응답 헤더에 대한 정규 표현식 매칭 소스에서 빌드 rustup의 nightly 툴체인이 포함된 Rust 빌드 환경이 필요합니다. cargo build --release binary is built as target/release/iouringscanner 사용법...

bambdas

Bambda 스크립트 PortSwigger의 공식 Bambda 스크립트 저장소에 오신 것을 환영합니다. 이 저장소에는 PortSwigger와 커뮤니티가 🧡을 담아 개발한 스크립트 모음이 포함되어 있습니다. 📑 이 페이지에서 Bambda 스크립트 유형 저장소 내용 Burp에 스크립트 가져오기 라이브러리에서 스크립트 업데이트 직접 스크립트 기여하기 리소스 Bambda 스크립트 유형 Bambda는 지원되는 Burp 도구에서 실행되는 스크립트입니다. 이를 통해 다음을 생성하여 Burp Suite를 빠르게 개인화할 수 있습니다: 테이블...

CVE-2025-23061

CVE-2025-23061 - Mongoose Command Injection A proof of concept for the Command Injection vulnerability in Mongoose = 7.0.0 = 8.0.0 8.9.5 CVE-2024-53900 & CVE-2025-23061 Timeline November 7, 2024: Dat Phung identified a critical vulnerability in Mongoose and submitted a security report to Snyk...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

CVE-2026-13413 CMP - Coming Soon & Maintenance < 4.1.20 - Unauthenticated Maintenance Mode Bypass via Login URL Match

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while maintenance/coming-soon mode is enabled, allowing unauthenticated visitors to bypass the coming-soon page and reach the otherwise hidden site, including hidden published pages, ...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – クエリ作成によるSQLite FTS3 Match情報漏洩 プログラムコード（Python） sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES 'admin:password123...

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

SummaryOn SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account the...

cve-2026-59891-control-lab

CVE-2026-59891 Regression & Control Lab @sigstore/oci의 실제 취약 버전과 수정 버전을 같은 입력으로 비교하고, 환경별 노출 조건을 점검하는 격리형 실습 및 read-only 감사 프로젝트입니다. 이 프로젝트의 CVE Reporter는 gyubin02입니다. 채용·면접용 요약: CVE-2026-59891 취약점 관리 자동화 사례 무엇을 검증하나 CVE-2026-59891의 핵심은 Registry 인증정보를 고를 때 발생하는 hostname 혼동입니다. 0.7.0: cr.io가 ghcr....

PT-2026-103020

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.49 Description An out-of-bounds write occurs when an attacker-controlled regular expression is used in conjunction with specific JIT API usage. This issue affects the pcre2 jit compile and pcre2 jit match functions,...

CentOS Linux 6 [TuxCare] Security Update: glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc (CENTOS6:CLSA-2025:1757700075)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1757700075 advisory. - In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap- based buffer over-read via an attempted...

Partial String Comparison

Overview @grpc/grpc-js-xds is a Plugin for @grpc/grpc-js. Adds the xds:// URL scheme and associated features. Affected versions of this package are vulnerable to Partial String Comparison via the PathExactValueMatcher.apply method in matcher.ts, where the case-insensitive exact path match...

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

Impact When using RBAC to apply authentication rules, the exact path method name matcher applies a prefix match instead of an exact match for case-insensitive matches. As a result, if a service has a method with a name that is a prefix of the name of a different method, and they have different...

EUVD-2026-88464

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...

CVE-2026-101914 @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...

CVE-2026-101914

The @grpc/grpc-js library (versions prior to 1.13.1 and 1.14.1 ) contains an authorization flaw where the exact path matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. This allows a request for a longer service method nam...

CVE-2026-101914 @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...

CVE-2026-101914 @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...