CVE-2026-40369

🚨 CVE-2026-40369 - विंडोज कर्नेल विशेषाधिकार उन्नति भेद्यता विंडोज कर्नेल हीप-आधारित बफर ओवरफ्लो जो स्थानीय हमलावरों को विशेषाधिकारों कोNT AUTHORITY\SYSTEM तक बढ़ाने की अनुमति देता है। 📖 अवलोकन CVE-2026-40369 एक उच्च गंभीरता वाली विशेषाधिकार उन्नति भेद्यता है जो माइक्रोसॉफ्ट विंडोज कर्नेल घटकों क...

React2Shell

React2Shell 📌 React2Shell CVE-2025-55182 React2Shell é o nome informal dado a uma vulnerabilidade crítica de Execução Remota de Código RCE que afeta os Componentes de Servidor React RSC e frameworks relacionados como Next.js. Sua gravidade e impacto potencial a tornaram uma grande preocupação nas...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）DoS Dieser Fehler nutzt einen Speicherfehler aus, wenn in einer einzigen Verbindung zu viele \r\n gesendet werden. Beispiel $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1...

CVE-2016-4971

CVE-2016-4971 Bei einer Serverweiterleitung von HTTP zu einer FTP-Ressource vertraut wget dem HTTP-Server und verwendet den Namen in der weitergeleiteten URL als Zieldateinamen. Weitere Details finden Sie in dem Beitrag in meinem Blog. Verwendung Auf Ihrem Server, node wget.js Auf Ihrem...

study-CVE-2025-55182

CVE-2025-55182 Study Repositório para estudar a vulnerabilidade Remote Code Execution RCE nos React Server Components. 🔴 Aviso Use apenas para fins educacionais. Usar em sistemas de terceiros sem permissão é ilegal. 📋 Resumo da vulnerabilidade...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Referência: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - código python para executar...

Linux-Kodachi

Übersicht Anmeldeinformationen Terminal Server & Desktop XFCE | Username: kodachi | Password: Security4All Kodachi 9 ist voll funktionsfähig Die Entwicklung von Kodachi 9 ist abgeschlossen und die Plattform ist voll funktionsfähig. Jede Komponente – eigenständige Binärdateien,...

Krawl

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

CVE-2020-14882

CVE-2020-14882 यह Python स्क्रिप्ट Oracle WebLogic Server CVE-2020-14882 में एक Remote Code Execution भेद्यता का शोषण करने के लिए डिज़ाइन की गई है, ताकि कमजोर लक्ष्य सर्वर पर कमांड निष्पादित किए जा सकें और उनके आउटपुट को HTTP अनुरोधों के माध्यम से कैप्चर किया जा सके। यह पहले एक लक्ष्य WebLogic UR...

CVE-2026-75601

Static Web Server (SWS) versions through 2.43.0 contain an authentication bypass when both the basic-auth and metrics features are enabled. The /metrics endpoint is processed before the basic-auth check in src/handler.rs, allowing an unauthenticated remote attacker to retrieve Prometheus metrics ...

CVE-2026-75601 Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled

Static Web Server SWS is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics features enabled process the /metrics endpoint before the basic-auth check in src/handler.rs, allowing an unauthenticated remote attacker to...

CVE-2026-75601 Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled

Static Web Server SWS is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics features enabled process the /metrics endpoint before the basic-auth check in src/handler.rs, allowing an unauthenticated remote attacker to...

stunner

STUNNER Stunner é uma ferramenta para testar e explorar servidores STUN, TURN e TURN sobre TCP. TURN é um protocolo usado principalmente em videoconferências e chats de áudio WebRTC. Se você encontrar um servidor mal configurado, pode usar esta ferramenta para abrir um proxy socks local que...

CVE-2026-48908

🚨 CVE-2026-48908 — Compromission totale du serveur via téléchargement arbitraire de fichiers Téléchargement critique de fichier non authentifié → Exécution de code à distance RCE Une vulnérabilité critique dans SP Page Builder permet à des attaquants non authentifiés de télécharger des fichiers...

goshs

Vous êtes en pleine mission. Vous devez transférer un fichier, capturer un hash SMB ou monter rapidement un serveur HTTPS — et python3 -m http.server ne suffira pas. goshs est un serveur de fichiers à binaire unique, conçu pour les moments où vous avez besoin de plus que le SimpleHTTPServer de...

CVE-2025-55182

CVE-2025-55182 Preuve de concept pour CVE-2025-55182, une RCE critique non authentifiée dans les composants serveur React. ⚠️ Avertissement Ce document est fourni strictement à des fins éducatives, défensives et de recherche en sécurité autorisée. Ne PAS tenter d'exploiter des systèmes ou...

miasma

🌀 Miasma Le aziende di intelligenza artificiale continuano a fare scraping di internet su scala enorme, inghiottendo tutti i suoi contenuti per usarli come dati di addestramento per i loro prossimi modelli. Se hai un sito web pubblico, stanno già rubando il tuo lavoro. Miasma è qui per aiutarti a...

CVE-2025-55182

CVE-2025-55182 Оригинальный автор:https://github.com/msanft/CVE-2025-55182 Эта уязвимость позволяет выполнить удалённый код RCE в серверных функциях React, например предоставляемых Next.js, через небезопасные ссылки на прототипы. Я не эксперт в React или Next.js, поэтому относитесь ко всей...

CVE-2025-14847-MongoBleed

CVE-2025-14847 MongoBleed Divulgazione di memoria tramite compressione zlib di MongoDB — Analisi, Rilevamento e Mitigazione Panoramica CVE-2025-14847, comunemente conosciuta come MongoBleed , è una vulnerabilità di divulgazione di informazioni ad alta gravità che colpisce...

CVE-2025-66478

1 root@kitploit: POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...