CVE-2026-107288

A flaw was found in pydantic-ai. The web fetching utilities fail to normalize domain names before checking them against the configured blocklist. A remote attacker capable of influencing the model output can supply alternate character encodings, case variations, or trailing labels that resolve to...

CVE-2023-26035

POC para CVE-2023-26035 Funciona para ZoneMinder versiones anteriores a 1.36.33 y 1.37.33 Vulnerabilidad: Ejecución remota de código RCE Uso └─➜ python3 poc.py -h usage: poc.py -h --target TARGET --cmd CMD poc.py: error: the following arguments are required: --target, --cmd Curl Antes de saltar a...

ApacheRCEEssay

CVE-2021-41773 Ensayo 🕸️ Descripción 🖼️ Este repositorio contiene un ensayo sobre CVE-2021-41773, una vulnerabilidad de ejecución remota de código en Apache 2.4.49. Fue creado para un curso de la Facultad de Automática y Computadoras, Universidad POLITEHNICA de Bucarest, denominado "Cyberdefences...

CVE-2020-26732

CVE-2020-26732 SKYWORTH GN542VF, versión de hardware 2.0 y versión de software 2.0.0.16, no establece el indicador Secure para la cookie de sesión en una sesión HTTPS Descripción SKYWORTH GN542VF, versión de hardware 2.0 y versión de software 2.0.0.16, no establece el indicador Secure para la...

CVE-2026-107290

A flaw was found in pydantic-ai. An inefficient content parsing mechanism in the web fetching component allows a remote attacker serving a crafted web page to trigger a Denial of Service DoS. By providing specially structured or deeply nested content, the attacker can block the application's even...

CVE-2026-107287

A flaw was found in pydantic-ai. When local web fetching processes attacker-controlled web content, converting HTML containing deeply nested block elements into Markdown causes excessive CPU and memory consumption. A remote attacker can exploit this vulnerability to trigger a Denial of Service Do...

shadowd

Logotipo Shadow Daemon es un cortafuegos de aplicaciones web que intercepta las peticiones a nivel de aplicación. Este repositorio contiene el componente principal de Shadow Daemon que maneja el análisis y almacenamiento de peticiones. Documentación Para la documentación completa, consulte...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

DeliberatelyVulnerableWebApp

Aplicación web deliberadamente vulnerable Struts 2 Este proyecto es una aplicación web Java que utiliza el framework Struts 2. Está construido con Maven y se puede ejecutar usando el servidor Jetty. Requisitos previos Kit de desarrollo de Java JDK 8 o superior Apache Maven 3.6.0 o superior Cómo...

0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / 0-Click RCE Exploit Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 Este repositorio contiene un exploit de prueba de concepto para CVE-2024-50498, una vulnerabilidad de inyección de código no autenticada en el plugin LUBUS WP Query Console de...

CVE-2018-17431-PoC

CVE-2018-17431-PoC Prueba de concepto para CVE-2018-17431 Título del Exploit: Comodo Firewall & Central Manager UTM Todas las versiones anteriores a 2.7.0 y 1.5.0 Ejecución remota de comandos basado en Web Shell Autor del Exploit: Milad Fadavvi Página del vendedor: https://www.comodo.com/ Enlace...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Oye, en este laboratorio de LetsDefend me sumergí en un zero‑day de SharePoint llamado ToolShell CVE‑2025‑53770. Básicamente, simulé un ataque real donde una petición POST maliciosa eludió la autenticación, ejecutó PowerShell para...

arachni-ui-web

Notice Arachni is heading towards obsolescence, try out its next-gen successor Ecsypno SCNR! Arachni - Web User Interface Version | 0.6.1.1 ---|--- Homepage | http://arachni-scanner.com Blog | http://arachni-scanner.com/blog Github | http://github.com/Arachni/arachni-ui-web Documentation |...

CVE-2023-20198-Fix

CVE-2023-20198-Fix Este repositorio contiene un playbook de Ansible para remediar la vulnerabilidad CVE-2023-20198 encontrada en ciertos dispositivos Cisco. Hace lo siguiente: 1. Verifica si el servicio web se está ejecutando en el router comprobando los comandos asociados en la configuración en...

CVE-2026-78407

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

CVE-2026-17189

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

CVE-2026-11936

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

CVE-2026-11930

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers...

AutoRepeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

creep-web-app-scanner

creep-web-app-scanner A very primitive website scanner currently under development by an NCC Group employee and University graduate with 20% research time. creep currently crawls a site, and searches for potentially interesting information within each page. creep will crawl your HTTP only target...