CVE-2019-0708

CVE-2019-0708 Introduction Microsoft has released its monthly security update for May. Included in this month's Patch Tuesday release is CVE-2019-0708, a critical remote code execution vulnerability that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target...

CVE-2026-112254

A server-side request forgery (SSRF) vulnerability exists in agit8or1 clientst0r up to version 3.17.586 . The flaw is located in the _fetch_html function within the Property URL Importer component (file: locations/services/property_url_importer.py). By manipulating the url argument, an attacker c...

CVE-2026-112254 agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

CVE-2026-27654

CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow via sizet Underflow Remote DoS / Potential RCE Description ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c computes the destination URI length by subtracting the location prefix length from the Destination header's URI pa...

CVE-2026-111750

A flaw was found in aiohttp. When running with the pure Python parser instead of compiled extensions, the parser accepts ambiguous HTTP Hypertext Transfer Protocol request framing. An unauthenticated remote attacker could exploit this flaw by sending specially crafted requests through an...

CVE-2026-73800

A flaw was found in Gitea. When executing an automated workflow triggered by a pull request, Gitea improperly loads local reusable workflow definitions from the untrusted fork rather than the trusted target repository. A remote attacker submitting a pull request can exploit this flaw to achieve...

CVE-2026-15409

🚨 CVE-2026-15409 Critical Unauthenticated SSRF in SonicWall SMA1000 Series Critical Server-Side Request Forgery SSRF vulnerability affecting SonicWall SMA1000 Series appliances. This repository documents the vulnerability, affected products, technical overview, impact, detection guidance, and...

CVE-2025-24813

Apache Tomcat Unauthenticated RCE - CVE-2025-24813 This repository provides a guide and testing environment to assess the CVE-2025-24813 vulnerability. Details Affected Versions: Apache Tomcat 11.0.0-M1 to 11.0.2 Apache Tomcat 10.1.0-M1 to 10.1.34 Apache Tomcat 9.0.0.M1 to 9.0.98 References...

CVE-2026-111064

A flaw was found in aiohttp. The server does not enforce a timeout during the initial phase of a request before any data is received. A remote attacker can exploit this vulnerability by keeping idle connections open indefinitely, exhausting available connection capacity and resulting in a Denial ...

trackem

trackem Passive Device Tracker AndroidTrackEm Mobile is a real-time, passive Wi-Fi + Bluetooth LE probe-request scanner designed for OSINT, red-team ops, and wireless research.It listens for client devices phones, laptops, IoT that are actively broadcasting the names of Wi-Fi networks...

cve-2016-4845_csrf

cve-2016-4845csrf Proof of concept for CSRF vulnerabilityCVE-2016-4825 on IO-DATA Recording Hard Disc Drive. License These codes are released under the MIT License. Please see LICENSE.txt...

CVE-2026-84178

CVE-2026-84178 — camel-oauth: authorization-code callback login CSRF missing state Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the OAuth authorization-code callback did not carry a state parameter binding it to the authorization request that started the flow, and...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...

CVE-2023-44811

CVE-2023-44811 mooSocial v3.1.8 is vulnerable to Cross Site Request Forgery CSRF which allows attacker to change admin password once an authenticated admin user clicks on the malicious crafted HTML page. I am providing 2 HTML Pages which will when clicked by an authenticated admin user will chang...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 What is the vulnerability about? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A remote attacker can conduct a cross-site request forgery CSRF attack on "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028". The vulnerability...

CVE-2025-30208

CVE-2025-30208 Using a special raw import query string on a vite dev server, a attacker can read arbitrary files Summary of the CVE Vite dev servers before 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 can bypass the server.fs.deny file access checks for @fs requests. Appending ?raw?? or ?import&raw??...

CVE-2023-5561-POC-Updated

CVE-2023-5561-POC-Updated This repository contains a modified version of the original Proof-of-Concept PoC for CVE-2023-5561. The original PoC, which can be found here, sends a high volume of requests in parallel, which may trigger Web Application Firewalls WAFs or cause the server to block the...

CVE-2025-52488

DNN Unicode Path Normalization NTLM Hash Disclosure Exploit CVE-2025-52488 Overview This exploit targets a vulnerability in DNN formerly DotNetNuke versions 6.0.0 to before 10.0.1 that allows attackers to disclose NTLM hashes through Unicode path normalization attacks. Vulnerability Details CVE I...

HTTPLeaks

HTTPLeaks What is this? This project aims to enumerate all possible ways, a website can leak HTTP requests. In one single HTML file. See the file leak.html raw text version in the root of this repository. What is it for? You can use this to test your browser for CSP leaks , your web-mailer for HT...