Fastjson Insecure Deserialization - Remote Code Execution

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi-// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...

LobeHub LobeChat <= 2.1.56 - Server-Side Request Forgery

LobeHub LobeChat versions up to and including 2.1.56 are vulnerable to an unauthenticated server-side request forgery vulnerability in the /webapi/proxy endpoint. The endpoint accepts a URL in the POST request body and fetches it server-side without authentication. id: CVE-2026-54157 info: name:...

ChanCMS <= 3.3.0 - Server-Side Request Forgery

yanyutao0402 ChanCMS 3.3.0 contains a server-side request forgery caused by manipulation of the "taskUrl" argument in /cms/collect/getArticle, letting remote attackers make arbitrary requests, exploit requires no special privileges. id: CVE-2025-10211 info: name: ChanCMS = 3.3.0 - Server-Side...

webp_server_go 0.4.0 - Path Traversal

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. id: CVE-2021-46104 info: name: webpservergo 0.4.0 - Path Traversal author: pikpikcu severity...

Dify v1.6.0 - Server-Side Request Forgery

Dify v1.6.0 contains a server side request forgery caused by improper validation in controllers.console.remotefiles.RemoteFileUploadApi, letting attackers make arbitrary requests from the server, exploit requires network access. id: CVE-2025-56520 info: name: Dify v1.6.0 - Server-Side Request...

CVE-2024-27564

CVE-2024-27564 Описание: Уязвимость в pictureproxy.php позволяет удалённым злоумышленникам выполнять произвольные запросы путём внедрения URL в параметр url. Эта уязвимость SSRF может быть эксплуатирована без аутентификации, что делает её особенно опасной. Уязвимый код находится в файле...

ReverseHttp

ReverseHttp Python-бэкдор, который использует HTTP POST/GET запросы для связи. Требования Python 2.7 Cherrypy pip install cherrypy Requests pip install requests Использование: Запустите скрипт-слушатель, затем контроллер, отправьте файл бэкдора и ожидайте подключений. Скриншот...

CVE-2025-70516

The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a vulnerability in its websocket handler due to a lack of proper authentication restrictions for sessionless users. This security flaw allows unauthenticated attackers to access various device resources, including operational l...

Snoopy

| || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "Amy, технологии не являются по своей сути хорошими или плохими. Всё зависит от того, как их использовать. Как с Лучом смерти." -Профессор...

phpstress

phpstress Доказательство концепции Night Lion Security — инструмент для проведения атак типа «отказ в обслуживании» / нагрузочного тестирования PHP-сайтов, работающих на системах Apache и NGINX PHP-FPM и PHP-CGI. При использовании стандартного кабельного/DSL-подключения эта атака может перегрузит...

forbidden

Forbidden Contournez les codes de statut de réponse HTTP 4xx et plus encore. L'outil est basé sur Python Requests, PycURL et HTTP Client. Testé sur Kali Linux v2024.2 64 bits. Conçu à des fins éducatives. J'espère qu'il vous aidera ! Plans futurs : Ajouter l'option silent pour supprimer la sortie...

EUVD-2026-93984

A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...

CVE-2026-104046

A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...

http-protocol-exfil

http-protocol-exfil Utilise la version du protocole HTTP pour envoyer un fichier bit par bit "HTTP/1.0" est un 0 et "HTTP/1.1" est un 1. Il utilise des requêtes GET, donc l'équipe bleue ne verrait que les requêtes vers votre adresse IP. Cependant, cela prend beaucoup de temps pour envoyer des...

web-brutator

Web Brutator Bruteforceur rapide et modulaire d'interfaces Web 📥 Installation python3 -m pip install -r requirements.txt ⏩ Utilisation $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / | / || |/...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

SQLi_Sleeps

SQLiSleeps Это простой скрипт, который позволяет находить уязвимости SQLi, получая время ответа более 20 секунд для medium и time-based инъекций. usage: SQLiSleeps2.py -h -u URLS -d DATA -c COOKIE Realiza una petición GET a múltiples URLs con diferentes datos. options: -h, --help show this help...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

MalleableC2Profiles

MalleableC2Profiles Профили Malleable C2 для Cobalt Strike версии 3.6+ bingsearchgetonly.profile - профиль веб-поиска Bing, использует только GET-запросы cnnvideogetonly.profile - профиль прямой видеотрансляции MSNBC, использует только GET-запросы googledrivegetonly.profile - профиль просмотра...