CVE-2022-29056

CVE-2022-29056 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

headerpwn

headerpwn サーバーが異なるHTTPヘッダーにどのように応答するかを分析するファザーです。 🏗️ インストール ⛏️ 使い方 📡 HTTPリクエストのプロキシ設定 インストール headerpwn をインストールするには、次のコマンドを実行してください： go install github.com/devanshbatham/[email protected] 使い方 headerpwn を使用すると、ターゲットURLに対して様々なヘッダーをテストし、その応答を分析できます。ツールの使い方は次のとおりです： 1. -url フラグを使用してターゲットURLを指定します。...

CVE-2015-7547-master

このコードは現状のまま（as-is）提供されます。このコードによって引き起こされるいかなるリスクからも、ご自身、ご自身の資産およびデータ、そして他の人々を保護する責任はお客様にあります。このコードは、お使いのマシンで予期しない望ましくない動作を引き起こす可能性があります。また、お使いのシステムの脆弱性を検出しない可能性があります。...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

VERIFICAR-CVE-2025-55182-Y-CVE-2025-66478 Este script detecta si un servidor está afectado por las vulnerabilidades RCE de RSC/Next.js CVE-2025-55182 y CVE-2025-66478. Comprueba la respuesta del servidor en busca de firmas específicas de vulnerabilidad. Esas firmas deben ser específicas según...

CVE-2026-72579

An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...

CVE-2026-72579

An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...

CVE-2026-72579

NASA HyperCP (main branch) contains an OS command injection vulnerability exploitable by a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov. The Source/OBPGSession.py handler parses server response headers without sanitization and forwards attacker-c...

EUVD-2026-53332

nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recvreaddeviceidentificationres function FC 0x2B/MEI 0x0E, Read Device Identification in nanomodbus.c. The server-supplied objectlength field 0-246 is validated only against the remaining PDU size ressizeleft and...

CVE-2026-68579 FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read

FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...

Linux Distros Unpatched Vulnerability : CVE-2026-68579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. Wh...

CVE-2024-23564

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. The application includes checks in the initial requests to verif...

CVE-2024-23564

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. The application includes checks in the initial requests to verif...

CVE-2026-35142 HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...

CVE-2026-35149

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the applicati...

CVE-2026-35149

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the applicati...

CVE-2026-35149 HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the applicati...

EUVD-2026-44907

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the applicati...

CVE-2026-35149 HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the applicati...

CVE-2026-35149

CVE-2026-35149 involves HCL DFXServer and describes an authentication bypass caused by server response manipulation. The vulnerability allows an unauthenticated attacker to gain access by intercepting and altering authentication responses, effectively bypassing verification. Reported CVSS-3.1 met...

PT-2026-60455

Name of the Vulnerable Software and Affected Versions HCL DFXServer affected versions not specified Description An authentication bypass exists due to server response manipulation. An unauthorized user can gain access to the application without valid credentials by intercepting and altering the...