CVE-2026-105648

The Ghost Node.js content management system is vulnerable to a validation issue in versions 6.0.9 through 6.65.0 . An unauthenticated user can abuse certain functionalities, such as Webmentions , to perform limited HTTP requests to hosts within the server's internal network on specific network co...

CVE-2026-105647

The Ghost Node.js content management system is vulnerable to a Server-Side Request Forgery (SSRF) issue in versions 6.54.1 through 6.65.0 . A validation issue allows an unauthenticated user to abuse specific functionalities, such as Webmentions , to perform limited HTTP requests to hosts within t...

CVE-2025-49132_poc

CVE-2025-49132 PoC Mejorado Esta es una versión mejorada del exploit de prueba de concepto CVE-2025-49132. Información del CVE ID de CVE : CVE-2025-49132 Referencia NVD : https://nvd.nist.gov/vuln/detail/cve-2025-49132 Base de datos de Wiz :...

CVE-2026-63267

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...

http-pulse_ssl_vpn.nse

RESUMEN Script NSE simple para detectar la divulgación de archivos de Pulse Secure SSL VPN mediante solicitudes de recursos HTTP especialmente manipuladas. Este exploit lee /etc/passwd como prueba de concepto. Esta vulnerabilidad afecta a 8.1R15.1, 8.2 anteriores a 8.2R12.1, 8.3 anteriores a...

CVE-2026-50522

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 payloads and analysis. HTTP requests request| src| user-agent| encoding| unique id| payload ---|---|---|---|---|--- 816978882| 45.63.58.216| Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36| '|...

CVE-2021-3831

PHP Exploit CVE-2021-3831 脚本 概述 该 PHP 脚本旨在通过生成特定的 MD5 哈希值并发送 HTTP 请求来与目标网站交互，以利用潜在漏洞。本脚本仅用于教育目的，且仅允许在您已获得明确授权进行漏洞测试的环境中使用。 特性 动态目标输入： 脚本接受目标 URL 作为命令行参数，使用灵活。 安全的 HTTP 请求： 利用 cURL 发起 HTTP 请求，提供稳健的错误处理与安全性。 错误日志记录： 记录错误信息，辅助调试与监控脚本执行。 模块化设计： 脚本通过清晰的函数定义组织，便于阅读与维护。 工作原理 1. MD5 哈希生成： 脚本基于目标 URL...

CVE-2022-24112_POC

POC 收集的POC CVE-2022-24112 为了做春秋云境:CVE-2022-24112靶场环境，修改了两个POC，将M4xSec与twseptian两位师傅的POC稍作修改，适应春秋云境靶场： 春秋云境:CVE-2022-24112： Apache Apisix是美国阿帕奇（Apache）基金会的一个云原生的微服务API网关服务。该软件基于 OpenResty 和 etcd 来实现，具备动态路由和插件热加载，适合微服务体系下的 API 管理。 Apache...

SpringBreakVulnerableApp

Aplicación Vulnerable Spring Break Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Spring Break CVE-2017-8046. ¡ADVERTENCIA! Esta aplicación contiene graves vulnerabilidades de seguridad. ¡Ejecútela bajo su propio riesgo! Se recomienda usar un entorno respaldado y...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF mediante diferencia de analizadores de URL Código del programa Python vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

Apache-APISIX-CVE-2022-24112

Exploit de Ejecución Remota de Código en Apache APISIX CVE-2022-24112 Resumen Un atacante puede abusar del plugin batch-requests para enviar solicitudes y eludir la restricción de IP de la Admin API. Una configuración predeterminada de Apache APISIX con la clave de API predeterminada es vulnerabl...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 和 CVE-2025-48976 关于 本项目运行一个简单的文件上传端点，使用 Tomcat 10.1.41 和 Jakarta Servlet。 默认情况下，该漏洞利用程序会从 50 个工作节点并发发送 1000 个并行化的多部分请求，每个请求包含 1000 个部分和每个部分 50 个头。 运行 POC 构建并运行 Docker 容器： docker build -t poc-cve-2025-48988 . docker run -p 8080:8080 poc-cve-2025-48988 启动漏洞利用程序： python3...

stack-overflow-poc

CVE-2018-12086 PoC https://nvd.nist.gov/vuln/detail/CVE-2018-12086 https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2018-12086.pdf TL;DR: 某些 OPC UA 堆栈在解码特制请求时容易受到堆栈溢出攻击。 构建 mvn clean package 运行 java -jar target/stack-overflow-poc.jar...

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

MAL-2026-17570 Malicious code in throttle-requests (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in throttle-requests (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — Vulnerabilidad Crítica en React Server 🧠 ¿Qué Es? ⚛️ Una falla de seguridad crítica en React Server Components RSC 🧨 Causada por deserialización insegura 🌐 Explotable mediante peticiones de red 🔓 No requiere autenticación ☠️ Puede llevar a Ejecución Remota de Código RCE ✅ Esto...

CVE-2023-27163-exploit

CVE-2023-27163 — exploit SSRF de request-baskets Escribí este exploit para apuntar a CVE-2023-27163 , una vulnerabilidad de Server-Side Request Forgery SSRF encontrada en request-baskets versiones ≤ 1.2.1. La falla se encuentra en el endpoint /api/baskets/name, donde el parámetro forwardurl permi...

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY Inspect exploited vulnerabilities and threat indicators, check their source evidence, and review retained changes. Open the live Observatory · Try the KEV walkthrough · Source coverage · Run it yourself The Observatory brings CISA KEV, ThreatFox, URLhaus, and...

Cisco ASA Improper Input Validation (CVE-2020-3304)

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...