CVE-2026-61559 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

EUVD-2026-80004

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

CVE-2026-61559

@zereight/mcp-gitlab (a Model Context Protocol server for GitLab) is vulnerable to Server-Side Request Forgery in versions 0.0.1 through

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft Affected - Repository: zereight/gitlab-mcp - Affected versions: All versions through commit 74a8c83 - Patched versions: None at time of report Severity High. CVSS v3.1 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Descripti...

GHSA-2H44-8472-FRJJ @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft Affected - Repository: zereight/gitlab-mcp - Affected versions: All versions through commit 74a8c83 - Patched versions: None at time of report Severity High. CVSS v3.1 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Descripti...

CVE-2023-26256

CVE-2023-26256 -h获取帮助 -u单个跑url -f 批量跑...

CVE-2020-14882

CVE-2020–14882 RCE por bypass no autorizado en Weblogic Bypass del parche con CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; lista root@kitploit: %252E%252E %2E%2E .. %3E %3C ; minúsculas root@kitploit: "%252E%252E%252F".lowe...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 は、Cisco IOS XE ソフトウェアの Web UI 機能における深刻な脆弱性であり、認証されていないリモート攻撃者が影響を受けるシステム上で特権レベル 15 のアカウントを作成し、デバイスを完全に制御することを可能にします。 この脆弱性は主に、Web UI 機能におけるパス解析の不適切な処理に起因します。攻撃者は巧妙に細工した HTTP リクエストを使用し、二重 URL エンコーディングを利用して Nginx のパスフィルタリングメカニズムをバイパスし、/webuiwsmahttp...

CVE-2022-25765-exploit

CVE-2022-25765 — pdfkit 中的命令注入 描述 CVE-2022-25765 是一个影响 pdfkit （Ruby gem） 0.8.7.2 版本的命令注入 （Command Injection）漏洞。该漏洞严重性为 CRITICAL ，CVSS 评分为 9.8，因为其允许在无需身份验证的情况下远程执行命令。 问题在于 pdfkit 将 url 参数直接传递给 shell，而未进行任何清理。该库在内部通过类似以下命令执行 wkhtmltopdf： root@kitploit: system"wkhtmltopdf --quiet ... 'url' output.pd...

Open-Redirect-Finder

Open-Redirect-Finder Open Redirect Finder 是一种自动化工具，用于检测 URL 上的开放重定向漏洞。 功能特性 批量处理：支持通过输入文件同时测试多个 URL。 自动验证：检查输入的 URL 是否存在开放重定向漏洞。 Payload 选项： 默认 Payload（选项 1）：仅使用代码中提供的 payload。 自定义 Payload（选项 2）：使用用户通过 custom.txt 文件输入的自定义 payload。 组合默认与自定义 Payload（选项 3）：同时使用默认和自定义 payload 的组合。 使用方法 1. 下载并安装 Pytho...

CVE-2023-49438

CVE-2023-49438 概念验证 描述 Python 包 Flask-Security-Too =2.1.0 中，autocorrectlocationheader 配置已更改为 False——这意味着重定向中的 Location 头默认是相对的。因此，如果应用程序使用 Werkzeug =2.1.0 作为 WSGI 层，此前未受影响的应用程序可能会受到影响。 缓解措施 1. 更新 Flask-Security-Too 至 5.3.3 root@kitploit: pip install -U Flask-Security-Too 或 2. 在应用中添加以下配置选项（可缓解所有...

CVE-2025-30208

CVE-2025-30208 POC CVE-2025-30208 pip install -r requirements.txt Funciones: -u Especificar URL a escanear -r Especificar archivo txt a escanear...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

domhttpx

domhttpx 是一个使用 Python 构建的 谷歌搜索引擎搜索器 及 HTTP 工具包，可以让你快速同时查找大量 URL/IP。 目录 安装 使用 参数 基本用法 单个关键词 多个关键词 提取页面标题 从真实路径提取页面标题 提取状态码 从真实路径提取状态码 提取 Web 服务器 运行示例 帮助与错误报告 致谢 安装 适用于 Windows、Linux 和 Mac root@kitploit: git clone https://github.com/naufalardhani/domhttpx.git cd domhttpx pip3 install -r...

CVE-2020-12124

CVE-2020-12124 CVE-2020-12124 の概念実証実装 https://vulners.com/cve/CVE-2020-12124 root@kitploit: The following is an actualization of CVE-2020-12124, a vulnerability which exploits a command injection in the Wavlink WN530H4 router in which certain parameters are taken from URL parameters in a web...

wp-CVE-2017-5487-exploit

WordPress CVE-2017-5487 Python 漏洞利用 使用示例： python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2026-76820

OpenCTI, an open-source cyber threat intelligence platform, is affected by a Server-Side Request Forgery (SSRF) in the synchronizerFetch GraphQL query prior to version 7.260701.0 . The backend's fetchRemoteStreams function validated only the HTTP/HTTPS scheme without applying the ingestion deny l...

CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...

CVE-2026-81920

Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset controller action cleared the administrator-configured reserved-word list concrete.seo.excludewords but did not validate the anti-CSRF token that the reset modal emitted, and ...