584 matches found
bypass-url-parser
Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...
dp_crypto
dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...
CVE-2019-17662
CVE-2019-17662 Modified the CVE code Used Prepared Requests, as in python3 requests module normalize the ../ in URL such as: For code: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode Results in: GET /test HTTP/1.1 Host: 123.123.123.123 Connection: close...
CVE-2022-22947
CVE-2022-22947 Exp This bug seems to be not recurrent everytime。 python3 requests...
forbidden
Forbidden Contournez les codes de statut de réponse HTTP 4xx et plus encore. L'outil est basé sur Python Requests, PycURL et HTTP Client. Testé sur Kali Linux v2024.2 64 bits. Conçu à des fins éducatives. J'espère qu'il vous aidera ! Plans futurs : Ajouter l'option silent pour supprimer la sortie...
exploit-writing-for-oswe
Написание эксплойтов для OSWE Предыстория Что это Этот репозиторий содержит список полезных фрагментов кода и советов, относящихся к написанию скриптов эксплойтов в лабораторных работах OSWE и на сертификационном экзамене. Некоторые примеры здесь могут противоречить отдельным практикам...
POC-CVE-2023-32681
POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...
Sharepoint-cve-2023-29375-incident-response
Анализ инцидента SOC: повышение привилегий в Microsoft SharePoint Server CVE-2023-29375 Глубокое исследование безопасности критической попытки эксплуатации и перечисления, нацеленной на сервер Microsoft SharePoint. Обзор инцидента Название оповещения: SOC227 — повышение привилегий в Microsoft...
Rocky Linux 8.6 [CIQ] Security Update: python38-requests Multiple Vulnerabilities (ciqsa-2026_0219)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260219 advisory. This advisory aggregates security fixes for the python-requests SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / etc Multiple Vulnerabilities (crlsa-2020_1605)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20201605 advisory. python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 python: Cookie domain check returns...
CVE-2024-21644-Poc
CVE-2024-21644 POC Install modules: pip install requests pip.install colorama...
EulerOS Virtualization 2.10.0 : python-requests (EulerOS-SA-2026-3884)
According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...
EulerOS Virtualization 2.10.1 : python-requests (EulerOS-SA-2026-3850)
According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...
EulerOS 2.0 SP10 : python-requests (EulerOS-SA-2026-3717)
According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...
EulerOS Virtualization 2.11.1 : python-requests (EulerOS-SA-2026-3467)
According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...
EulerOS Virtualization 2.11.0 : python-requests (EulerOS-SA-2026-3554)
According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...
EulerOS 2.0 SP10 : python-requests (EulerOS-SA-2026-3764)
According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...
CVE-2026-91943: Server-Side Request Forgery (SSRF)
Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where getpdfpath re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to access...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-requests (UTSA-2023-002301)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002301 advisory. Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint...
