CF-Hero

CF-Hero CF-Hero 它是什么？ • 功能特性 • 背景 • 安装 • 使用方法 • 运行 cf-hero • ZoomEye（赞助商） • 待办事项 它是什么？ CF-Hero 是一款综合性侦察工具，旨在发现由 Cloudflare 保护的 Web 应用的真实 IP 地址。它通过各种方法执行多源情报收集。 DNS 侦察 当前的 DNS 记录（A、TXT） 历史 DNS 数据分析 关联域名发现 情报来源 ZoomEye 搜索引擎 Censys 搜索引擎 Shodan 搜索引擎 SecurityTrails 历史记录 主动 DNS 枚举 关联域名相关性分析...

CVE-2017-9841

🔍 功能特性 多线程扫描 ，高效测试多个目标 智能载荷生成 ，使用唯一标识符进行精准验证 多漏洞路径检测 ，覆盖常见Web应用结构 自动响应验证 ，确认实际漏洞存在 详细日志记录 ，记录漏洞站点和错误信息 彩色终端输出 ，实时跟踪扫描进度 可配置超时与重试机制 ，确保扫描可靠性 📋 环境要求 Python 3.6+ 所需Python包（详见安装部分） 待扫描的目标域名/IP列表 🚀 安装 1. 克隆仓库： git clone https://github.com/joelindra/Argus.git cd Argus 2. 安装所需依赖： pip install -r...

CLEANSTART-2026-QV01130 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node

Security vulnerability affects the vault package. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node...

CVE-2026-91945

FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized ATR lengths in PAKIDCOREDEVICEIOCOMPLETION responses to trigger reads past...

CVE-2026-80465

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

GO-2026-6282 Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

CVE-2026-63073: Use of Externally-Controlled Format String

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

UBUNTU-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: smb: client: Rejected overlapping data areas in SMB2 responses. The commit 53b7c271f06b “smb: client: restrict implied bcc0 exemptions to responses without a data area” limited the implied bcc0 length exception to responses that ...

CVE-2026-53425 Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses

Insufficient Verification of Data Authenticity vulnerability in dropbox samly allows an attacker to establish an authenticated session using a SAML response the service provider never requested. Samly.SPHandler.validateauthresp/3 in lib/samly/sphandler.ex validates a SAML response for the...

PT-2026-79073

Name of the Vulnerable Software and Affected Versions dropbox samly versions 0.3.0 and later Description An issue exists where the service provider fails to properly verify the authenticity of SAML responses. Specifically, the validate authresp/3 function in lib/samly/sp handler.ex does not compa...

SUSE CVE-2026-74998

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS Cascading Style Sheets proxy were not validated, which may result in information disclosure or XSS cross-site scripting via MIME sniffing...

CVE-2026-48931

A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure. Mitigation Limit outbound HTTP/1.1 from Node.js clients to...

DEBIAN-CVE-2026-68340

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...

CVE-2026-64257

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b "smb: client: restrict implied bcc0 exemption to responses without data area" restricted the implied bcc0 length exception to responses without a da...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

CVE-2026-13223

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...