vhosts-sieve

VHosts Sieve 해결 불가능한 도메인 중에서 가상 호스트를 검색합니다. 설치 git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt 사용법 서브도메인 목록을 가져옵니다 예: Amass 사용 $ amass enum -v -passive -o domains.txt -d example.com -d example-related.com vhosts-sieve.py를 사용하여 가상 호스트를 찾습니다 ...

CVE-2021-35492

エクスプロイト情報 エクスプロイトタイトル: Wowza Streaming Engine 4.8.11+5 - サービス拒否 CVE: CVE-2021-35492 日付: 2021-10-06 エクスプロイト作者: N4nj0 ソフトウェアリンク: https://www.wowza.com/products/streaming-engine バージョン: 4.8.11+5 テスト済み: Wowza Streaming Engine = 4.8.11+5 脆弱性アドバイザリ:...

scout

Scout Scout는 웹 서버에서 공개되지 않은 VHOST, 파일 및 디렉토리를 발견하기 위한 URL 퍼저 및 스파이더입니다. 전체 단어 목록이 바이너리에 포함되어 있어 최대의 이식성과 최소한의 설정을 제공합니다. 조준하고 발사하세요! 사용법 Usage: scout command Available Commands: help Help about any command url Discover URLs on a given web server. version Display scout version. vhost Discover VHOS...

rustbuster

rustbuster 포괄적인 웹 퍼저 및 콘텐츠 발견 도구 소개 블로그 글 확인: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool 다운로드 미리 빌드된 바이너리를 여기에서 다운로드할 수 있습니다. 설치 installrustbuster echo "Installing latest version of Rustbuster" latestversion=curl -s https://github.com/phra/rustbuster/releases |...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

smuggler

/ | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to Ben Sadeghipour...

ffuf

ffuf - 더 빨리 퍼징해, 이 바보야 Go로 작성된 빠른 웹 퍼저. 설치 사용 예시 콘텐츠 발견 가상 호스트 발견 파라미터 퍼징 POST 데이터 퍼징 외부 뮤테이터 사용 구성 파일 도움말 인터랙티브 모드 설치 릴리스 페이지에서 사전 빌드된 바이너리를 다운로드하여 압축을 풀고 실행하세요! 또는 Windows에서 Scoop을 사용한다면 ffuf는 다음과 같이 설치할 수 있습니다: scoop install ffuf 또는 Windows에서 Winget을 사용한다면 ffuf는 다음과 같이 설치할 수 있습니다: winget insta...

BIT-RABBITMQ-2026-67412 RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authorization allowing cross-vhost message access. what the bug lets you do. A policymaker on one vhost reads and drains messages out of another...

BIT-RABBITMQ-2026-67408 RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

BIT-RABBITMQ-2026-66076 RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, isauthorized/2 calls rabbitmgmtutil:isauthorized/2, which checks only the management tag, instead of isauthorizedvhost/2. The /api/queues/quorum/:vhost/:queue/status handler reads the vhost...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_67470)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667470 advisory. kernel: vhost: move vdpa group bound check to vhostvdpa CVE-2026-43248 kernel: security/keys: fix missed RCU read section on lookup CVE-2026-64015 kernel:...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2024_3627)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243627 advisory. kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation CVE-2023-6240 kernel: Information disclosure in vhost/vhost.c:vhostnewmsg...

PT-2026-103935

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.69 Description A stack-based buffer overflow exists in the mod vhost alias module. A remote client can trigger a denial of service or potentially execute arbitrary code by sending an HTTP request with a...

Rocky Linux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1768555539)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768555539 advisory. - A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side...

Rocky Linux 8 [CIQ] Security Update: dpdk / dpdk-debuginfo / dpdk-debugsource / dpdk-devel / dpdk-doc / etc (crlsa-2023_0171)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230171 advisory. dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs CVE-2022-2132 Tenable has extracted the preceding description block directly...

CentOS Linux 7 [TuxCare] Security Update: libsoup / libsoup-devel (CENTOS7:CLSA-2026:1769687040)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1769687040 advisory. - A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing...

CVE-2026-97993

A flaw was found in the Linux kernel's vhost-vdpa subsystem. A local attacker can cause a Denial of Service DoS by exploiting a race condition when updating interrupt configurations with an invalid file descriptor. Because the kernel temporarily installs an unvalidated error pointer into the devi...

CVE-2026-97994

A flaw was found in the Linux kernel's vhost-vDPA virtio Data Path Acceleration subsystem. A local user with access to a vhost-vDPA device can configure a queue size that exceeds the device's maximum supported capacity due to insufficient boundary validation. This improper validation can lead to ...

CVE-2026-97992

A flaw was found in the Linux kernel's vhost-vdpa driver. A race condition between device configuration updates and event notifications allows a context structure to be freed while still being accessed by an active callback. A local user with access to the device interface can exploit this...

CVE-2026-97988

A flaw was found in the Linux kernel's vhost subsystem. When transitioning device address modes or updating feature settings, cached virtual ring pointers and translation metadata are not properly invalidated, leaving stale memory mappings in use. A local attacker with access to the vhost device...