CVE-2021-41773

CVE-2021-41773 Path Traversal para Apache 2.4.49 https://ubuntu.com/security/CVE-2021-41773 Base afectada hora: 22:49 06/10/2021 Uso root@kitploit: IP python3 CVE-2021-41773.py -i 10.10.10.10 -s Lista de IPs python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s...

poc-yaws-cgi-shell-injection

Inyección de comandos del sistema operativo en el servidor web Yaws CVE-2020-24916 Prueba de concepto Construir imagen de prueba: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . y/o Ejecutar el contenedor docker run --rm -d -i -p 127.0.0.1:8000:8080...

poc-yaws-dav-xxe

XXE en el servidor web Yaws CVE-2020-24379 Prueba de concepto Construir imagen de prueba: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . y/o Ejecutar el contenedor docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod A continuación, ejecutar: root@kitploit: curl...

CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260 POC de vulnerabilidad de inyección de comandos en el servidor web de algunos productos Hikvision. Debido a una validación insuficiente de entrada, un atacante puede explotar la vulnerabilidad para lanzar un ataque de inyección de comandos enviando mensajes con comand...

CVE-2026-36957

CVE-2026-36957: Denegación de Servicio mediante Inundación HTTP en el Servidor Web Boa ID CVE: CVE-2026-36957 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: Shenzhen Dibit Network Equipment Co., Ltd. Producto: Router Dbit Versión de Firmware: V1.0.0 CWE: CWE-400 - Consumo de Recursos N...

CVE-2019-16278

CVE-2019-16278 Script de explotación de ejecución remota de comandos en el servidor web Nostromo Introducción Vulnerabilidad de ejecución remota de comandos causada por un directory traversal. Al igual que CVE-2011-0751, el filtrado no es estricto, lo que permite usar %0d para evadirlo. Alcance...

CVE-2023-5961

Este repositorio contiene un script de Python y una plantilla de nuclei diseñados para detectar vulnerabilidades en dispositivos Moxa ioLogik, centrándose específicamente en la vulnerabilidad CVE-2023-5961. Además, proporciona información sobre la vulnerabilidad y los avisos de seguridad...

CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repositorio: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Descripción Este repositorio contiene un exploit en Python para CVE-2019-16278 , una vulnerabilidad en Nostromo 1.9.6 un servidor web. La vulnerabilidad permite la Ejecución Remota de Código...

CVE-2024-8232

CVE-2024-8232 – Vulnerabilidad de subida de archivos en SpiderControl SCADA Web Server Resumen El servidor web SpiderControl SCADA es vulnerable a la subida arbitraria de archivos sin autenticación, lo que permite a los atacantes subir scripts maliciosos por ejemplo, webshells y obtener ejecución...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Use-After-Free en Rust en un servidor web inseguro Código del programa Rust root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffe...

EUVD-2026-79661

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publishe...

CVE-2026-83309

CVE-2026-83309 affects the Web Server component of Oracle BI Publisher (part of Oracle Analytics), in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized read access to critical...

CVE-2026-89025

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

CVE-2026-89025

Hirschmann HiOS Switch Platform devices are affected by a denial-of-service vulnerability in the integrated web server caused by missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint, causing the device to perf...

PT-2026-92831

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publishe...

PT-2026-92022

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

PT-2026-92802

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

RLSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:67308 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...