862 matches found
CVE-2022-22963
CVE-2022-22963 In versions 3.1.6, 3.2.2, and earlier versions of Spring Cloud Function, when using the routing functionality, it is possible for a user to provide a specially crafted SpEL as a routing expression that can result in remote code execution and access to local resources. PoC Clone the...
NodeSecurityShield
Node Security Shield Node Security Shield NSS es una herramienta de protección de aplicaciones en tiempo de ejecución RASP de código abierto que busca cerrar la brecha en la seguridad integral de NodeJS, permitiendo que los desarrolladores e ingenieros de seguridad declaren qué recursos puede...
CVE-2022-22963-Exploit
Exploit de CVE-2022-22963 Este repositorio contiene un exploit basado en Rust para la vulnerabilidad CVE-2022-22963 presente en Spring Cloud Function versiones 3.1.6, 3.2.2 y versiones anteriores no compatibles. La vulnerabilidad permite la ejecución remota de código y el acceso a recursos locale...
Jira-Scan
Jira-Scan SOLO PROBADO CON PYTHON 3 Proporciona una lista de sitios web para probar sin el http o https y esto probará cada uno para la vulnerabilidad SSRF. Usa una VPS de DO CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 hasta la versión 1.9.12 y desde la versi...
rakkess
rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...
rakkess
rakkess Revisar Acceso - plugin de kubectl para mostrar una matriz de acceso para recursos del servidor Introducción ¿Alguna vez te has preguntado qué derechos de acceso tienes en un clúster de Kubernetes proporcionado? Para recursos individuales puedes usar kubectl auth can-i list deployments,...
CVE-2023-27163-POC
CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...
CVE-2019-20372
REFERENCIA https://bertjwregeer.keybase.pub/2019-12-10%20-%20errorpage%20request%20smuggling.pdf Ejecutar servidor docker run -it --rm -p 80:80 -v pwd/default.conf:/etc/nginx/conf.d/default.conf nginx:1.17.6 Explotación printf "GET /a HTTP/1.1\r\nHost: localhost\r\nContent-Length: 56\r\n\r\nGET...
CVE-2017-9506
Prueba de concepto SSRF y XSS https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 anterior a la versión 1.9.12 y desde la versión 2.0.0 anterior a la versión 2.0.4 permite ...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.5 release and security update
Red Hat JBoss Web Server 6.2.5 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.5 release and security update
Red Hat JBoss Web Server 6.2.5 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...
jira-ssrf
jira-ssrf CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 anterior a la versión 1.9.12 y desde la versión 2.0.0 anterior a la versión 2.0.4 permite a atacantes remotos acceder al contenido de recursos internos de la red y/o realizar un ataque XSS a través de Serv...
Alternate Path Bypass
Apache Tika is vulnerable to an alternate path bypass. The vulnerability is due to improper protection of an alternate path, where the library does not properly validate alternate file paths and attackers can supply crafted paths to access unauthorized resources...
cve-2024-38821
cve-2024-38821 Análisis: https://www.deep-kondah.com/spring-webflux-static-resource-access-vulnerability-cve-2024-38821-explained/...
CVE-2026-44578
🚨 CVE-2026-44578 — Vulnerabilidad SSRF en Next.js 📌 Resumen CVE-2026-44578 es una vulnerabilidad de alta gravedad de falsificación de solicitudes del lado del servidor SSRF que afecta aplicaciones Next.js auto-alojadas. Los atacantes pueden explotar solicitudes de actualización WebSocket...
EUVD-2026-87369
Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When ACTUALGITHUBTOKEN is configured, the proxy automatically attaches the server'...
EUVD-2026-85288
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated...
CVE-2026-86708: Use of Hard-coded Cryptographic Key
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated...
PT-2026-97313
Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182200 and earlier Description An exposure of a Google Cloud service-account private key exists within the installer. This flaw allows an unauthenticated attacker to impersonate the service account,...
