CVE-2024-25277

CVE-2024-25277 entdeckt auf MW45APT02.0002 Ressourcen und PoCs Dieses Repository enthält eine Sammlung von Skripten und PoCs, die während der Analyse und Entdeckung von CVE-2024-25277 zusammengestellt wurden. Weitere Informationen zum Fund finden Sie unter:...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentifizierungsumgehung Kaiten – ein Workflow-Management-System. Eine Schwachstelle in Kaiten ermöglicht es Angreifern, den PIN-Code-Authentifizierungsmechanismus zu umgehen. Die Anwendung verlangt von Benutzern nach der Eingabe ihrer Anmeldedaten die Eingabe eines...

CVE-2021-3138

..| Discourse 2.7.0 - CVE-2021-3138 |.. 描述： 速率限制绕过，导致双因素认证绕过 测试版本： 2.7.0 攻击类型： 远程 影响： 2FA 绕过 产品供应商： https://www.discourse.org 附加信息： Discourse 是为下一个十年互联网构建的讨论平台。用作： - 邮件列表 - 讨论论坛 - 长文聊天室 还有像 Google 收购的知名公司等一直使用 Discourse 至今。 发现者： Meshal Almansour Twitter: mesh3l911...

CVE-2014-0195

XML-RPC WordPress 브루트포스 익스플로잇 스크립트 이 저장소는 CVE-2014-0195에 취약한 WordPress 인스턴스의 로그인 자격 증명을 브루트포스하기 위한 Python 기반 개념 증명PoC을 포함합니다. XML-RPC의 system.multicall 함수를 악용하여 단일 HTTP 요청 내에서 여러 로그인 시도를 수행할 수 있으며, 이로 인해 서비스 거부DoS가 발생할 수 있습니다. 이 스크립트는 사이버보안 전문가가 WordPress 설치의 보안 상태를 평가하기 위해 사용하도록 설계되었습니다. 면책 조항 이...

CVE-2016-16113-POC

Get RCE – Bludit CMS Exploit root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| Ein automatisiertes Exploitation-Tool, das CVE-2019-17240 Authentication Bypass und CVE-2019-16113 Arbitrary File Upload kombiniert, um...

goop

goop Google-Suche-Scraper Hinweis: Es funktioniert nicht mehr. Google hat mir mitgeteilt, dass es kein legitimes Problem sei, als ich es meldete, aber jetzt haben sie es stillschweigend behoben. Inhalt Einleitung Wie funktioniert es? Verwendung Installation Beispiel Rechtliches & Haftungsausschlu...

cve-2026-8697

CVE-2026-8697: Bypass del limite di tentativi di accesso su TP-Link Archer C64 CVE-2026-8697 è un difetto logico nel sistema operativo del TP-Link Archer C64 chiamato TPOS nel messaggio di debug. Consente a qualsiasi utente non privilegiato connesso al router di aggirare il limite di tentativi...

requests-ip-rotator

Orgogliosamente sponsorizzato da Swiftproxy Proxy residenziali ad alte prestazioni con un pool di oltre 80 milioni di IP in più di 195 paesi — migliora il tasso di successo delle richieste e riduce i blocchi IP durante la raccolta di dati su larga scala e l'automazione del browser. Perfetto per...

batchql

BatchQL BatchQL è uno script di auditing di sicurezza per GraphQL con un focus sull'esecuzione di query e mutazioni GraphQL in batch. Questo script non è complesso e accogliamo con favore i miglioramenti. Quando abbiamo esplorato lo spazio dei problemi degli attacchi di batching GraphQL, abbiamo...

CVE-2026-11103-GraphQL-Batching-Alias-Rate-Limit-Bypass

3. CVE-2026-11103 – Bypass do Limite de Taxa via Alias de Batching em GraphQL Código do Programa Exploit em Node.js + Python root@kitploit: // graphqlratelimitserver.js - GraphQL with naive rate limiter const express = require'express'; const graphqlHTTP = require'express-graphql'; const...

xmlrpc-brute

Ferramenta de Força Bruta WordPress XML-RPC Uma ferramenta projetada para testar sites WordPress em busca de vulnerabilidades XML-RPC, tentando forçar credenciais de usuário através da interface XML-RPC. Descrição Esta ferramenta testa instalações WordPress em busca de vulnerabilidades de...

CVE-2026-69183 Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)

Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-controlled cf-connecting-ip and x-forwarded-for headers before the trust-proxy-derived req.ip value. An unauthenticated...

CVE-2026-69183 Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)

Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-controlled cf-connecting-ip and x-forwarded-for headers before the trust-proxy-derived req.ip value. An unauthenticated...

EUVD-2026-63423

Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-controlled cf-connecting-ip and x-forwarded-for headers before the trust-proxy-derived req.ip value. An unauthenticated...

EUVD-2026-62850

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

CVE-2026-54738 Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

CVE-2026-54738

Lemmy , a fediverse link aggregator and forum, is vulnerable to rate limit bypass via X-Forwarded-For header spoofing in versions prior to 0.19.19 and 1.0.0-beta.1 . The root cause is that actix-web's ConnectionInfo::realip_remote_addr reads the first value of X-Forwarded-For as the client addres...

CVE-2026-54738 Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

PT-2026-78696

Name of the Vulnerable Software and Affected Versions Lemmy versions prior to 0.19.19 Lemmy versions prior to 1.0.0-beta.1 Description An issue exists where the ConnectionInfo::realip remote addr function in actix-web reads the first value of the X-Forwarded-For header as the client address used ...

CVE-2026-57485

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /api/v1/pipeline/handleData endpoint in app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java injects the STIRLING-PDF-BACKEND-API-USER API...