net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2025-20384

SPLUNK CVE-2025-20384 i dunno, i just read stuff my friendo sent to me and start typing down some random sorry ass nub javascript code Log Injection/Forgery/Poisoning/Obfuscate type POC Please read this arcticle OWASP Log Injection TL;DR Look for static file, passed it and append some random...

CVE-2025-21385

SSRF Exploit Script This repository contains a script designed to perform an SSRF Server-Side Request Forgery exploit for testing and educational purposes. Use this tool responsibly and only in environments where you have explicit permission. Features Exploit SSRF vulnerabilities in target system...

CVE-2024-9933

CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option URL Options: check : Verify if the target URL is vulnerable. exploit : Attempt to exploit the vulnerability on the provided URL. Examples: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.c...

Follina_MSDT_CVE-2022-30190

Microsoft explains that “a remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker ca...

CVE-2025-63441

CVE-2025-63441 Title: Reflected XSS via arbitrarily supplied URL parameter param at endpoint u/administrator/friends Summary: A Reflected Cross-Site Scripting XSS vulnerability was identified in the u/administrator/friends endpoint of the OSSN application. This vulnerability allows attackers to...

CVE-2021-36798

CVE-2021-36798 CVE-2021-36798 Cobalt Strike 4.3 DoS Usage root@kitploit: python3 CVE-2021-36798.py BeaconURL Cripple Cobalt Strike with just one packet Tested on 4.3, 4.2 References: https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/...

CVE-2022-35914

CVE-2022-35914 Batch Detection Tool Create a target.txt file, import the URLs to be detected, and then start batch detection. If an error occurs, please disable the proxy...

cve-2025-24514

🔥 CVE-2025-24514 Remote Vulnerability Check PoC This script is a Python-based PoC that can remotely check for the CVE-2025-24514 vulnerability NGINX configuration manipulation and potential RCE through auth-url injection in ingress-nginx. 🧠 Vulnerability Overview CVE-2025-24514 is a vulnerability...

CVE-2021-43798-EXPLOIT

CVE-2021-43798 - Grafana 目录遍历 🔍 Grafana 是一个用于监控和可观测性的开源平台。版本 8.0.0-beta1 至 8.3.0（修补版本除外）容易受到目录遍历攻击，允许未经授权访问本地文件。此漏洞不影响 Grafana Cloud。漏洞存在于 URL 路径 /public/plugins// 的处理中。通过操纵 参数，攻击者可以遍历目录并访问预期目录之外的文件。 影响 💥 攻击者可以利用此漏洞访问主机系统上的敏感文件，可能导致对 Grafana 实例或主机系统的进一步危害。 受影响版本 ❗️ Grafana 版本 8.0.0-beta1 至...

Metabase-cve-2021-41277

Metabase-cve-2021-41277 Metabase arbitrary file read optional arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use eg1:python3 Metabase-cve-2021-41277.py -u http://127.0.0.1 eg2:python3...

Solr-SSRF

Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: root@kitploit: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...

CVE-2014-0094-test-program-for-struts1

About CVE-2014-0094 and Struts 1 Countermeasures Introduction This article summarizes the impact of CVE-2014-0094 on Struts 1. Unless otherwise noted, all versions were verified using Java 1.7.002, Struts 1.3.10, Apache Tomcat 6.0.39, and FreeBSD 8.2. In no event shall we be liable for the conten...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat：通过 Rewrite Valve 绕过目录保护 → 基于 PUT 的 RCE🚨🚨 摘要 CVE-2025-55752 是 Apache Tomcat 在修复 bug 60013 时引入的一个安全回归问题。当使用 Rewrite Valve 时，Tomcat 在 URL 解码 之前应用 路径规范化 。这种错误的顺序使得精心构造的 URI 能够绕过 StandardContextValve.java 中对 /WEB-INF/ 和 /META-INF/ 等受保护路径实施的访问检查。如果服务器接受 HTTP PUT...

CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 Proof Of Concept This repository provides scripts to automatically deploy a WebDAV server on Ubuntu using Apache2 , and generate malicious.url shortcut files for use in phishing, red teaming, or lateral movement simulation. 📁 Contents setupwebdav.sh – Bash script to configure Apach...

cve-2017-0065

Exploiting Edge's read:// urlhandler Introduction This exploit was reported to Microsoft and I was acknowledged for doing so. The exploit has been patched on March 14th 2017 under names cve-2017-0065 and MS17-007 and will not work if related patches are applied. Sourcecode is provided for...

composer-CVE-2026-40261-CVE-2026-40176-PoC

!CAUTION 本仓库包含针对 Composer 中漏洞 CVE-2026-40261 和 CVE-2026-40176 的概念验证代码。 !CAUTION 该代码仅用于教育和测试目的。 !CAUTION 请勿在生产环境中使用此代码，或未经适当授权对系统进行测试。 !CAUTION 在测试任何安全漏洞之前，请务必确保您已获得许可。 概述 本仓库演示了 Composer 中通过 Perforce VCS 驱动程序进行命令注入的两个漏洞。 共有三种攻击向量： 1. 向量 1 — 通过 'url' 注入（变为 -p ）。旧代码在构造 Perforce 驱动程序的命令字符串时未对 URL...

CVE-2026-8030

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to prevent another user from modifying their group settings due to improper validation o...

swagger-ui

Introduction: The Role of Swagger UI Swagger UI is a widely used library that renders OpenAPI formerly Swagger specifications into an interactive web interface. It enables developers and integrators to explore and test APIs without having the backend implementation in place. CVE‑2018‑25031 Detail...