{"items":[{"data":{"jarm":"3fd3fd0003fd3fd21c43d43d00043de429a7fdaeec5f2fc00e892bbf4a875e","ip":"178.83.207.119","isp":"UPC Schweiz","certificate":{"issuer_dn":"O=, CN=dms.huamaitel.com","fingerprint_md5":"fbca1dcd99d2f87d1f6d0738478b1f3e","redacted":false,"src":"https://178.83.207.119:8333/","signature":{"valid":true,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"huo4+Ckd1q813YDiwInUbdB4bJRET/H5ghqEd/3Uzys2kwAX+tJ54pfeftRHrazahx8DKAlGyD0suQUiczfkMaSdrO2yAolOJSVKmpF/2qGZ4Py2BoKgVtSV21TuwpTglWNBVxDCmMmnOSdOr3ihU2WariHJL0R7gByXyFLPzjakCaEJ0FQeiWzjh3VXCSSgoExnILFdSipnFS4J19o/1C1yfaM302C0B7OwvKGEJwwLCQM/y/f578cs+pp4dDKnMAOXFFf2GG6REh9wjtLSXLFNQ0hExZ/rd829M+/wdzm8bNQ2v04LJMDGw3+5bCbfHvFHlj0Hb6tShUAmrNX1hg==","self_signed":true},"subject":{"organization":[""],"common_name":["dms.huamaitel.com"]},"serial_number":"1995122564793739836077476673327421563","version":3,"issuer":{"organization":[""],"common_name":["dms.huamaitel.com"]},"fingerprint_sha256":"c6e4ea8dcdea1bf38d9278873f77680517784a3f41d47b072e7ed855aabf17f7","tbs_noct_fingerprint":"bd0bfc77ffd40f46a91473469e39d2eba82bd9be770432965ecc1e9dc8ee2c11","tbs_fingerprint":"bd0bfc77ffd40f46a91473469e39d2eba82bd9be770432965ecc1e9dc8ee2c11","extensions":{"key_usage":{"digital_signature":true,"key_encipherment":true,"value":5},"basic_constraints":{"is_ca":false},"extended_key_usage":{"server_auth":true}},"names":["dms.huamaitel.com"],"subject_dn":"O=, CN=dms.huamaitel.com","fingerprint_sha1":"584e9259d30bb774a7e7ec6aac750aba02af1e63","spki_subject_fingerprint":"e59c86e0abcf331201474c19dc2ab3026a431b7a1d475529d402c6131dee1c73","validity":{"start":"2025-06-11T00:00:00Z","length":31535999,"end":"2026-06-10T23:59:59Z"},"validation_level":"unknown"},"uri":"https://178.83.207.119:8333/","host_type":"ip","target":{"ip":"178.83.207.119","type":"ip"},"prot7":"http","geo":{"continent":"Europe","country":"CH","city":"Pfaeffikon","tz":"Europe/Zurich","accuracy":5,"location":{"lon":8.7832,"lat":47.2052},"postal":"8808","registered_country":"CH","subdivisions":["Schwyz"]},"path":"/","protocol":"https","prot4":"tcp","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.0","integrity_impact":"HIGH","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage\"s `DiskService#path_for` does not validate that the resolved filesystem path remains within the storage ...","published":"2026-03-24T00:16:28.987","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33195","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ruby on Rails"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and ...","published":"2024-06-04T20:15:10.237","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-28103","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ruby on Rails"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatch. This vulnerability is patched in 7.1.3.1. Ruby 3.2 has mitigations for this problem, so ...","published":"2024-02-27T16:15:46.600","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-26142","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"LOW","attack_complexity":"LOW","base_score":"2.3","integrity_impact":"NONE","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage\"s proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with ...","published":"2026-03-26T22:16:29.387","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33658","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.6","integrity_impact":"HIGH","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage\"s `DiskService#delete_prefixed` passes blob keys directly to `Dir.glob` without escaping glob ...","published":"2026-03-24T00:16:29.157","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33202","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.6","integrity_impact":"NONE","description":"Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number helpers accept strings containing scientific notation (e.g. `1e10000`), ...","published":"2026-03-24T00:16:28.807","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33176","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.6","integrity_impact":"NONE","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Storage\"s proxy delivery mode, the proxy controller loads the entire requested byte ...","published":"2026-03-24T00:16:28.630","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33174","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"LOW","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary metadata from the client and persists it on the blob. Because internal flags ...","published":"2026-03-24T00:16:28.457","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-33173","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"LOW","description":"Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `SafeBuffer#%` does not propagate the `@html_unsafe` flag to the newly created buffer. If a ...","published":"2026-03-24T00:16:28.287","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-33170","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.9","integrity_impact":"NONE","description":"Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. `NumberToDelimitedConverter` uses a lookahead-based regular expression with `gsub!` to insert thousands delimiters. Prior to versions 8.1.2.1, ...","published":"2026-03-24T00:16:28.113","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-33169","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.","published":"2026-07-09T17:16:58.260","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-15308","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.0","integrity_impact":"HIGH","description":"The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().","published":"2026-03-20T15:16:24.057","attack_vector":"LOCAL","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"ACTIVE","name":"CVE-2026-4519","match_type":"product","confidentiality_impact":"HIGH","match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.","published":"2024-09-03T13:15:05.363","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-6232","match_type":"product","confidentiality_impact":"NONE","match_product":"Python","exploit_links":["https://github.com/python/cpython/issues/121285","https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"There is a LOW severity vulnerability affecting CPython, specifically the \"http.cookies\" standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with ...","published":"2024-08-19T19:15:08.180","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-7592","match_type":"product","confidentiality_impact":"NONE","match_product":"Python","exploit_links":["https://github.com/python/cpython/issues/123067"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"An issue was discovered in Python 3.11 through 3.11.4. If a path containing \"\\0\" bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first \"\\0\" byte. There are plausible cases in which an application would have ...","published":"2023-08-23T07:15:08.590","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2023-41105","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.","published":"2023-08-22T19:16:32.007","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-48565","match_type":"product","confidentiality_impact":"HIGH","match_product":"Python","exploit_links":["https://bugs.python.org/issue42051","https://github.com/Einstein2150/CVE-2022-48565-POC"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"A use-after-free exists in Python through 3.9 via heappushpop in heapq.","published":"2023-08-22T19:16:31.827","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-48560","match_type":"product","confidentiality_impact":"NONE","match_product":"Python","exploit_links":["https://bugs.python.org/issue39421"]},{"severity":"LOW","attack_complexity":"LOW","base_score":"2.0","integrity_impact":"LOW","description":"In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing ...","published":"2026-06-30T15:16:57.193","attack_vector":"NETWORK","privileges_required":"HIGH","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-4360","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"4.1","integrity_impact":"HIGH","description":"When using the \"configparser\" module to write configuration files containing multi-line text values with carriage return characters (\\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.","published":"2026-06-23T18:17:41.243","attack_vector":"LOCAL","privileges_required":"HIGH","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-0864","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"MEDIUM","attack_complexity":"HIGH","base_score":"6.3","integrity_impact":"NONE","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to ...","published":"2026-05-11T18:16:42.413","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-7210","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"HIGH","has_exploit":true,"description":"Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.","published":"2026-07-30T12:17:27.347","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-17544","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP","exploit_links":["https://github.com/Boreas37/CVE-2026-17544-PoC","https://github.com/r2qa/CVE-2026-17544"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"HIGH","has_exploit":true,"description":"Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.","published":"2026-07-30T12:17:27.120","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-17543","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP","exploit_links":["https://github.com/pratham220/CVE-2026-17543-PHP-Exposure-Validator","https://github.com/Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"HIGH","has_exploit":true,"description":"In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) ...","published":"2026-05-10T05:16:11.213","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-6735","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP","exploit_links":["https://github.com/php/php-src/security/advisories/GHSA-7qg2-v9fj-4mwv"]},{"severity":"CRITICAL","attack_complexity":"HIGH","base_score":"9.5","integrity_impact":"HIGH","description":"In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension\"s object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When ...","published":"2026-05-10T05:16:11.070","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-6722","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.4","integrity_impact":"HIGH","description":"In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing ...","published":"2026-05-10T05:16:09.853","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"ACTIVE","name":"CVE-2025-14179","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.2","integrity_impact":"NONE","has_exploit":true,"description":"In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \\x99) in a ...","published":"2025-12-27T20:15:40.717","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-14180","match_type":"product","confidentiality_impact":"NONE","match_product":"PHP","exploit_links":["https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwj"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.2","integrity_impact":"LOW","description":"In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, ...","published":"2025-12-27T20:15:40.570","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-14178","match_type":"product","confidentiality_impact":"NONE","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string ...","published":"2025-07-13T23:15:22.940","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-1735","match_type":"product","confidentiality_impact":"NONE","match_product":"PHP"},{"severity":"CRITICAL","attack_complexity":"HIGH","base_score":"9.2","integrity_impact":"HIGH","has_exploit":true,"description":"In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example ...","published":"2025-04-04T18:15:48.020","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-11235","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP","exploit_links":["https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477","https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477"]},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further ...","published":"2025-02-12T22:15:29.007","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-31631","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.1","integrity_impact":"HIGH","description":"An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler (rb_getaddrinfo in ext/socket/raddrinfo.c) allows a remote attacker who can delay DNS responses near the user- ...","published":"2026-05-22T18:16:22.927","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-46727","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ruby"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large ...","published":"2024-02-10T05:15:08.650","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-21490","match_type":"product","confidentiality_impact":"NONE","match_product":"AngularJS","exploit_links":["https://github.com/RoninForge/roninforge-angularjs-migration"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"HIGH","description":"An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` constructor. Any value used in a ...","published":"2026-08-04T17:16:46.127","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-15307","match_type":"product","confidentiality_impact":"HIGH","match_product":"Django"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series ...","published":"2026-04-07T15:17:46.500","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-4277","match_type":"product","confidentiality_impact":"HIGH","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `ASGIRequest` allows a remote attacker to spoof headers by exploiting an ambiguous mapping of two header variants (with hyphens or with underscores) to a single ...","published":"2026-04-07T15:17:46.353","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-3902","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit when reading `HttpRequest.body`, allowing ...","published":"2026-04-07T15:17:39.393","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33034","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode ...","published":"2026-03-03T15:16:19.103","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-25673","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `django.utils.text.Truncator.chars()` and `Truncator.words()` methods (with `html=True`) and the `truncatechars_html` and `truncatewords_html` template filters allow ...","published":"2026-02-03T15:16:13.570","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-1285","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `ASGIRequest` allows a remote attacker to cause a potential denial-of-service via a crafted request with multiple duplicate headers. Earlier, unsupported Django ...","published":"2026-02-03T15:16:11.750","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-14550","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. Algorithmic complexity in `django.core.serializers.xml_serializer.getInnerText()` allows a remote attacker to cause a potential denial-of-service attack triggering ...","published":"2025-12-02T16:15:56.013","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-64460","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","has_exploit":true,"description":"An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted ...","published":"2025-11-05T15:15:41.080","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-64459","match_type":"product","confidentiality_impact":"HIGH","match_product":"Django","exploit_links":["https://shivasurya.me/security/django/2025/11/07/django-sql-injection-CVE-2025-64459.html","https://github.com/rockmelodies/django_sqli_target_CVE-2025-64459","https://github.com/nunpa/CVE-2025-64459","https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed","https://github.com/0xCyberstan/CVE-2025-64459-Poc","https://github.com/Z3YR0xX/CVE-2025-64459","https://github.com/alxsourin/Helpdesk-Telecom-CVE-2025-64459","https://github.com/purehate/CVE-2025-64459-hunter","https://github.com/joshualent/django-cve-2025-64459","https://github.com/rafaelchriss/RedTeamBrasil-CVE-2025-64459","https://github.com/YouGina/CVE-2025-64459"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut ...","published":"2025-11-05T15:15:40.940","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-64458","match_type":"product","confidentiality_impact":"NONE","match_product":"Django","exploit_links":["https://github.com/ch4n3-yoon/CVE-2025-64458-Demo"]},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and ...","published":"2026-07-17T20:17:28.490","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-63030","match_type":"product","confidentiality_impact":"HIGH","match_product":"WordPress","exploit_links":["https://github.com/Icex0/wp2shell-poc","https://github.com/attackercan/wp2shell-poc2","https://github.com/ZephrFish/wp2shell-scanner","https://github.com/Senanfurkan/wordpress-cve-2026-63030","https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause","https://github.com/dinosn/wp2shell-lab","https://github.com/47Cid/wp2shell-lab","https://github.com/Lutfifakee-Project/wp2shell","https://github.com/ekomsSavior/wp2shell","https://github.com/NULL200OK/WP2Shell","https://github.com/kulichr/wp2shell","https://github.com/CybersecSpirit/CVE-2026-63030","https://github.com/4minx/CVE-2026-63030","https://github.com/mverschu/CVE-2026-63030","https://github.com/0xsha/wp2shell","https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t","https://github.com/gbrsh/CVE-2026-63030","https://github.com/0xBlackash/CVE-2026-63030","https://github.com/mrx-arafat/CVE-2026-63030-POC","https://github.com/0xWhoknows/wp2shell","https://github.com/zi3lak/wp2shell_scanner","https://github.com/ebrasha/abdal-cve-2026-63030","https://github.com/securelayer7/WordPresShell","https://github.com/fullhunt/wp2shell-scan","https://github.com/ChiefYoru/CVE-2026-63030_PoC","https://github.com/own2pwn-fr/wp2shell-detect","https://github.com/JohenLastGen-JLG/wp2shell","https://github.com/mhtsec/CVE-2026-63030","https://github.com/c0gnit00/Wp2Shell","https://github.com/ikow/wp2shell","https://github.com/TomorrowX6/CVE-2026-63030-poc","https://github.com/bahartanir/wp2shell-scanner","https://github.com/eyesecurity/wp2shell-compromise-scanner-plugin","https://github.com/0xh7ml/CVE-2026-63030","https://github.com/4B3R4M4-607D/CVE-2026-63030-POC","https://github.com/InstaWP/wp2shell-scan","https://github.com/hidden-investigations/wp2shell-scanner","https://github.com/ananay/wp2shell-lab","https://github.com/Lukols-Dev/wp-cve-2026-63030-check","https://github.com/skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030","https://github.com/vulnquest58/PressVector","https://github.com/ZenithGenius/wordpress-batch-rce-lab","https://github.com/Crypto-Cat/wp2shell","https://github.com/administrator-01001/CVE-2026-63030","https://github.com/joaovicdev/EXPLOIT-CVE-2026-63030","https://github.com/0xjessie21/wp2shell-checker","https://github.com/Iqbalx7/wp2shell","https://github.com/SentinelXofficial/sxwp2shell","https://github.com/GhostInExile/CVE-2026-63030-Wp2Shell","https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN","https://github.com/Ch4120N/CVE-2026-63030","https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC","https://github.com/mcipekci/wp2shell","https://github.com/Adrees-Basheer/wp2shell-vulnerability-scanner","https://github.com/raphy76/wp2shell-poc-fulljs","https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc","https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction","https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137","https://github.com/shinthink/CVE-2026-63030","https://github.com/imXur/WordPress-CVE-2026-63030-Analysis","https://github.com/yuag/wp2shell","https://github.com/BytesPulse-OE/wp2shell-Hestia-Scanner","https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell","https://github.com/johnlodan/wp2shell-rce","https://github.com/Procjevt/CVE-2026-63030","https://github.com/x-znn/CVE-2026-63030","https://github.com/rechandra/wp2exp-2026","https://github.com/minwunn/wp2shell-CVE-2026-63030","https://github.com/sowarma/wp2shell-PoC","https://github.com/AnggaTechI/CVE-2026-63030","https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass","https://github.com/g0d150ne/WP2Shell"]},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution via its `__destruct()` magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior ...","published":"2024-04-04T23:15:16.333","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-31211","match_type":"product","confidentiality_impact":"HIGH","match_product":"WordPress","exploit_links":["https://github.com/Abdurahmon3236/-CVE-2024-31211"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.8","integrity_impact":"HIGH","description":"WordPress is an open publishing platform for the Web. It\"s possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins -> Add New -> Upload Plugin screen in WordPress. If FTP credentials ...","published":"2024-04-04T23:15:16.127","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"REQUIRED","name":"CVE-2024-31210","match_type":"product","confidentiality_impact":"HIGH","match_product":"WordPress"},{"severity":"MEDIUM","attack_complexity":"HIGH","base_score":"5.9","integrity_impact":"NONE","has_exploit":true,"description":"WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.","published":"2026-07-17T20:17:27.790","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-60137","match_type":"product","confidentiality_impact":"HIGH","match_product":"WordPress","exploit_links":["https://github.com/h4cd0c/wp2shell","https://github.com/ebrasha/abdal-cve-2026-60137","https://github.com/codeb0ssx/Ultimate-wp2shell","https://github.com/mrmtwoj/Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress","https://github.com/Colere-Sys/wp2shell-poc","https://github.com/northsia/CVE-2026-60137-With-Skip-SSL","https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030","https://github.com/michael-kanda/Wp2shell-ioc-scanner","https://github.com/AdarshThakur14777-cyber/CVE-2026-60137","https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.4","integrity_impact":"LOW","description":"WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it ...","published":"2024-10-16T07:15:12.497","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2022-4973","match_type":"product","confidentiality_impact":"LOW","match_product":"WordPress"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.1","integrity_impact":"LOW","has_exploit":true,"description":"WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with ...","published":"2024-05-03T06:15:14.947","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2024-4439","match_type":"product","confidentiality_impact":"LOW","match_product":"WordPress","exploit_links":["https://www.wordfence.com/blog/2024/04/unauthenticated-stored-cross-site-scripting-vulnerability-patched-in-wordpress-core/","https://www.wordfence.com/blog/2024/04/unauthenticated-stored-cross-site-scripting-vulnerability-patched-in-wordpress-core/","https://github.com/MielPopsssssss/CVE-2024-4439","https://github.com/d0rb/CVE-2024-4439","https://github.com/xssor-dz/-CVE-2024-4439","https://github.com/soltanali0/CVE-2024-4439","https://github.com/w0r1i0g1ht/CVE-2024-4439"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","has_exploit":true,"description":"WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack","published":"2023-10-16T20:15:18.073","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2023-5561","match_type":"product","confidentiality_impact":"LOW","match_product":"WordPress","exploit_links":["https://github.com/pog007/CVE-2023-5561-PoC","https://github.com/rootxsushant/CVE-2023-5561-POC-Updated","https://github.com/dthkhang/CVE-2023-5561-PoC"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"4.3","integrity_impact":"NONE","has_exploit":true,"description":"Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 ...","published":"2023-10-13T12:15:09.970","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2023-39999","match_type":"product","confidentiality_impact":"LOW","match_product":"WordPress","exploit_links":["https://patchstack.com/articles/wordpress-core-6-3-2-security-update-technical-advisory?_s_id=cve","https://patchstack.com/articles/wordpress-core-6-3-2-security-update-technical-advisory?_s_id=cve"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.4","integrity_impact":"LOW","has_exploit":true,"description":"Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.","published":"2023-10-13T10:15:09.823","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2023-38000","match_type":"product","confidentiality_impact":"LOW","match_product":"WordPress","exploit_links":["https://patchstack.com/articles/wordpress-core-6-3-2-security-update-technical-advisory?_s_id=cve","https://patchstack.com/articles/wordpress-core-6-3-2-security-update-technical-advisory?_s_id=cve"]}],"@timestamp":"2026-08-19T21:59:21.515Z","whois":{"abuse":"report@abuseradar.com","related_nets":[{"created":"2026-05-25T16:16:45Z","start_ip":"178.83.206.0","range":"178.83.206.0 - 178.83.207.255","net_size":511,"cidr":["178.83.206.0/23"],"updated":"2026-05-25T16:16:45Z","end_ip":"178.83.207.255"},{"created":"2026-05-25T16:16:45Z","start_ip":"178.83.206.0","range":"178.83.206.0 - 178.83.207.255","net_size":511,"cidr":["178.83.206.0/23"],"updated":"2026-05-25T16:16:45Z","end_ip":"178.83.207.255"}],"net":{"country":"CH","address":"Regent street 207\nW1B 3HH\nLondon\nUNITED KINGDOM","created":"2025-12-19T08:46:41Z","range":"178.83.128.0 - 178.83.255.255","handle":"NU834","organization":"ORG-IL687-RIPE","name":"NET-178-83-128-0-17","start_ip":"178.83.128.0","net_size":32767,"cidr":["178.83.128.0/17"],"updated":"2025-12-19T08:46:41Z","end_ip":"178.83.255.255","contacts":{"phones":["+370 699 08833"]}},"asn":{"country":"GB","registry":"ripencc","number":["151419"],"name":"LINKLESS-AS-AP - LINKLESS COMMUNICATIONS LIMITED","cidr":"178.83.206.0/23","updated":"2009-12-14"}},"port":8333,"host":"178.83.207.119","http":{"headers":{"date":["Wed, 19 Aug 2026 21:57:28 GMT"],"server":["HID-Web"],"content_type":["text/html; charset=UTF-8"],"content_length":["174416"]},"status_code":200,"body_sha256":"fef53ff137e8f9c544f53aebbc002e7a37bb8f11ffdc503e6cda25e491e5a400","meta":["charset=\"UTF-8\"","http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"","http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" ","http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"","http-equiv=\"Pragma\" content=\"no-cache\" ","charset=\"utf-8\"","content=\"IE=edge\" http-equiv=\"X-UA-Compatible\"","content=\"object\" property=\"og:type\"","content=\"GitLab\" property=\"og:site_name\"","name=\"keywords\" content=\"VOS3000, VoIP, VoIP运营支撑系统, 软交换\"","name=\"description\" content=\"VOS3000, VoIP, VoIP运营支撑系统, 软交换\"","content=\"Help\" property=\"og:title\"","content=\"GitLab Community Edition\" property=\"og:description\"","content=\"summary\" property=\"twitter:card\"","content=\"Help\" property=\"twitter:title\"","content=\"GitLab Community Edition\" property=\"twitter:description\"","content=\"GitLab Community Edition\" name=\"description\"","content=\"#474D57\" name=\"theme-color\"","content=\"#30353E\" name=\"msapplication-TileColor\"","name=\"csrf-param\" content=\"authenticity_token\" ","name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e7c96eda39b99be1fec23b082b==\" ","name=\"generator\" content=\"vBulletin 5.5.4\" ","id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\"","id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\"","id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\""],"tracker":{"google_analytics":["GM-3","GM-5","G-NVR16P","G-IP","G-L","G-1421G","G-1402G","GT-AC2900","GT-AC5300","GT-AX11000","GT-AX6000","G-GEXPON"]},"description":"VOS3000, VoIP, VoIP运营支撑系统, 软交换","status_line":"200 OK","body":"_4tplink\n_3dlink\n_5RouterOS\nEnGenius\nHydra/0.1.8\nchaset\nCerio\nNUUOA\nMMcS\nvar AYECOM_FWVER=\"1.03\";\n \n Please enter your username and password.\n \n \n \n
The Cacti Group Version 1.2.25
\n IPFire 2.19 (2017v) - Core Update 110 introduces significant changes\n \n \n \nWebswing\nWelcome - Identi.ca\nWelcome To Craft CMS\nWelcome to AW930-S\nWelcome to Belkin Router Setup\nWelcome to CentOS\nWelcome to JBoss AS\nWelcome to Keycloak\nWelcome to OpenResty!\nWelcome to QNAP Turbo NAS\nDocument follows\nRunning Processes\nSaving file\n\nCopyright © 2024 Vinchin Technology Co., Ltd. All Rights Reserved © 2024 Vinchin Vinchin build: 5.0.0\nSRX300\n/cgi-bin/showhtml?page=login.html\nCPE200-CPE-V2.2-Build20200917120259\n0000000000000000\ndt:'21feec',cu:'21feec','zul.wgt.Button','11fe','zul.fud.FileuploadDlg','21fe','zul.wgt.Fileupload','31fe',\nConnecting to\nConnection Manager\nConsole\nContainer Management - v.2016\nCoreUI Free React.js Admin Template\nCorso-Admin - Ignition Gateway\nCrawlab\nCrossSource\nCyber Sleuth Academy\nCyberoam,Cyberoam\nredirect_suffix\n/css/qnap-default.css\n/redirect.html?count=\nMath.random()\n/indexnas.cgi?counter=\nqnap_hyperlink\nQNAP Systems, Inc. All Rights Reserved.\nredir=/remote/hostcheck_install\nWelcome to Axis2 Web Admin Module !!\nresult= 0;\n\t\t\t\n\t\t\tDisplaying supported browser info alone in RA devices\n\t\t\t
\n\t\t\t\tBest viewed with\n\t\t\t\t\n\t\t\t\t\tEdge 40+, \n\t\t\t\t\tFirefox 60+, \n\t\t\t\t\tSafari 10+, \n\t\t\t\t\tChrome 59+.\n\t\t\t\t\nKeenetic Lite III – Login\nKeenetic Speedster – Login\nKeenetic Web\nKerio Connect WebMail\nKevin Izevbigie\nKingType - LuCI\nKodExplorer - Powered by KodExplorer\nKodbox - - Powered by kodbox\nKoishi ???\nKomga\nVideo.Local.Format=H264,MJPEG\nAudio.Input.Num=8\nAudio.Output.Num=1\nAudio.Format=ULAW\nAudio.Local.Input.Num=8\nAudio.Local.Output.Num=1\nAudio.Local.Format=PCM\nLanguage.Default=ENGLISH\nLanguage.Support=ENGLISH&CHINESE&JAPANESE&FRANCE&GERMAN&SPANISH&PORTUGUESE&ITALIAN&TURKISH&POLISH&RUSSIAN&CUSTOMIZE&THAI&VIETNAM&DUTCH&GREEK&ARABIC&CZECH&HUNGARIAN&HEBREW&CHINA&\nCapability=D0,80,A,80\n[S]ild917120[E]\n[S]root[E]\n[S]\nroot\n[S]\n\n\t\t\n\t\t\n\t\n\t\nServer: TASK-SERVER-NAS\nServer: TOPSEC\nServer: TOS/1.12.1\nServer: TOSHIBA TEC CORPORATION\nServer: TP-LINK HTTPD/1.0\nServer: TP-LINK Router\nServer: TP-LINKHTTPD/1.0\nServer: TR069 Agent\nServer: TR069 client TCP connection request Server\nServer: TRMB/1.2\ntail@AGDMZ1A00MB001299\nthis is a mail-in-a-box\ntimes\ntorservers.net - Anonymizer Tor Exit Router\ntrojan ????\ntrojan 管理平台\nttyd - Terminal\nuploadFile\nupyun - Proxmox Virtual Environment\nverysync\nWEB LOGIN\nWEB Management System\nWEB SERVICE\nWEB SETUP\nWEB SURVEILLANCE\nWEB Server\nWEB configuration\nWEB????\nWFS-SR01\nWHM Login\nWWW-Authenticate: Basic realm=\"NETGEAR DGN1000\"\nWWW-Authenticate: Basic realm=\"Server Status\"\nWWW-Authenticate: Basic realm=\"Panasonic network device\"\nWWW-Authenticate: Basic realm=\"System\"\nWWW-Authenticate: Basic realm=\"HomeHub\"\nWWW-Authenticate: Basic realm=\"DVR\"\nWWW-Authenticate: Digest realm=\"GoAhead\", domain=\":81\",qop=\"auth\", nonce=\"405448722b302b85aa6ef2b444ea6b5c\", opaque=\"5ccc069c403ebaf9f0171e9517f40e41\",algorithm=\"MD5\", stale=\"FALSE\"\nWWW-Authenticate: Digest realm=\"Control\", domain=\"PDVR M800\", nonce=\"34712299626f372c5ea0729ded8e8f37\", algorithm=MD5, qop=\"auth\"\nWWW-Authenticate: Basic aHR0cHdhdGNoOmY=\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"N2UyNjgxMjA6NjQ1MWZiOTA6IDJlNjI5NDA=\", qop=\"auth\", algorithm=\"MD5\"\nRecorDing_ID: 1804289383\nGG_Bond\nglide.db.properties\nglide.db.name = admin\nglide.db.rdbms = admin\nglide.db.user = admin\nglide.db.url = http://127.0.0.1:8080\nPNG\nHillstone\ngetPwdHash(a,'7492')\nLNMP一键安装包 by Licess\nLOGIN MENU\nLOGIN TCF CMMS\nLOGIN | Clinic Queuing System\nLOGIN\nLOTTO DOWJONE SPECIAL\nLS-O9710n iss3\nLT400\nLTD8304T-FT 10.1.10.150,Digital Video Recorder\nLTE CPE\nserver: lighttpd/1.4.28\nserver: lighttpd/1.4.35\nserver: lighttpd/1.4.53\nserver: lighttpd/1.4.54\nserver: lighttpd/1.4.59\nserver: lighttpd/1.4.66\nserver: lighttpd/1.4.71\nserver: lighttpd/1.4.76\n\n-->\nNC-WR624WTV\nNC-WR744G\nNCEX\nNEBERO Login\nNETCORE NI360 S3,NETCORE NI360 S3\nNETCORE NR235W,NETCORE NR235W\nNETCORE NR236W,NETCORE NR236W\nNETCORE NR255-V,NETCORE NR255-V\nNETCORE NR256,NETCORE NR256\nNETCORE NR266,NETCORE NR266\nvar passadm = \"admin\";\nOPMODE_BRIDGE\ndocument.all.cmd_result\n\n\nmain page cgi-bin/login.cgi\nvar sessionKey='030ff030ff88';\nloc += '&sessionKey=19dec20030ff8dcb2';\n}\n\nAxel MyWeb 4.0\nAxis 2 - Home\nB-LINK Router\nB-LINK\nB-LINK????\nBAIRY\nBAS2Web\nBB-SC384 Network Camera\nBB-SC384B Network Camera\nBB-ST162 Network Camera\nServer: FC03-HTTPS\nServer: FN-Httpd 1.0 [HTTP/1.1]\nServer: FPBX-14.0.17(13.38.3)\nServer: FSM-Webs\nServer: FastCGI\nServer: FlowWeb/1.4.28\nServer: FuckYou\nServer: FunshionService1.0.1.104Beta\nServer: FunshionService1.0.1.63Beta\nServer: FunshionService1.0.5.8Beta\nServer: Mikrotik HttpProxy\nServer: MikrotikHttpProxy\nServer: MinIO Console\nServer: Mini web server 1.0 CMIOT corp 2018.\nServer: Mini web server 1.0 Skyworth corp 2017.\nServer: Mini web server 1.0 ZTE corp 2005.\nServer: Mini web server 1.0 ZXIC corp 2005.\nServer: Mini web server 2.0 CDATA corp 2017.\nServer: Mini-RomPager/4.34\nServer: MiniServ\nWisenet WEBVIEWER\nWispro | Bmu\nWitree Anio Web Configuration\nWopr7\nWordPress › Setup Configuration File\nWorktop\nX2 - ??\nX2 - 登录\nXBR-55X700D\nXCN News\nRT-AC66U,RT-AC66U\nRT-GM-3\nRT-GM-5\nRT-N10PV2,RT-N10PV2\nRT-N10U,RT-N10U\nRT-N12,RT-N12\nRT-N12VP,RT-N12VP\nRT-N66U (build 45849) - Info\nRT2880 Linux Internet Gateway Device,RT2880 802.11 SoC Solution\nRTDVR ActiveX\nlamp-web\nlan2 - LuCI\nlaosong\nliboliang_blog\nlinux-dash : Server Monitoring Web Dashboard\nlitemall\nlocalhost.localdomain\nlogin\nlovechen-embyserver-1\nlwjfork\n\nSAML Assertion verification failed; Please contact your administrator\nv=2b46554c087d2d5516559e9b8bc1875d\n/vpn/images/AccessGateway.ico\nframe-busting\n/vpn/js/logout_view.js?v=\n_ctxstxt_NetscalerAAA\nlib.min20200813.js\n401 Unauthorized Basic realm=\nsName='1';onTest(this);\n<title>TL-WR850N\nTL-WR940N/TL-WR941ND\nTL-WR940N\nTM Automação\nTM-716 NVR 16POE\nTNAS - Synology DiskStation\nTOP Mail\nTOS 5.1\nTOTOLINK N200RS+\nTOTOLINK\nServer: thttpd/2.19-MX Sep 29 2011\nServer: thttpd/2.20b\nServer: thttpd/2.20b 10oct00\nServer: thttpd/2.20c 21nov01\nServer: thttpd/2.21b PHP/20030920\nServer: thttpd/2.22beta4 14nov2001\nServer: thttpd/2.23beta1 26may2002\nServer: thttpd/2.23beta1-titan-20031028\nServer: thttpd/2.24 26oct2003\nServer: thttpd/2.2426oct2003\nF600W\nF601\nF606\nF612\nF620G\nF620V2\nF625G\nF660,ZTE Broadband Home Gateway\nF6600\nF6600P\nCPPLUS DVR – Web View\nCPPLUS DVR –Web View\nCPPLUS Remote – Web View\nCPR-Lonato - Web UI\nCRESTRON\nCSXcloud - Synology NAS\nCSXcloud - Synology NAS\nCT8321R\nCWP ADMIN\nCWP | User\nFortiWLM Login\nFour-Faith (build 1464) - Info\nFour-Faith (build 4057M) - Info\nFour-Faith (build 4068:4071M) - Bilgi\nFour-Faith (build 4468) - Info\nFreePBX Administration\nFreebox OS :: Identification\nFreedomBox\nFriendly Exit Node\nFrm_Logintoken\n\t\t\t\t© \n\t\t\t\t- \n\t\t\t\t Best viewed with\n\t\t\t\t\n\t\t\t\t\tEdge 40+, \n\t\t\t\t\tFirefox 60+, \n\t\t\t\t\tSafari 10+, \n\t\t\t\t\tChrome 59+.\n\t\t\t\t\n\t\t\t\t\n\n\n\n\n\n\n\n\n\n\nPushNotify.MaxChannel=8\nWiFiber 121AC inMesh\nDBSTEP V3.0 0 14 0 请使用Post方法\nmultipleParameters\t0\tLinkem_01721A\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\t0\tlinkem123\ncitrix_ctx\n/citrix.do\nhttp://127.0.0.1/users/password/edit?reset_password_token=01AF\n\nYour password has been changed successfully.\nIf your email address exists in our database\nGeoVision Inc. - Video Server\nGerapy\nGhana Online Wholesale & Retail - Amanbo.com.gh\nGin-Vue-Admin\nGitea: Git with a cup of tea\nGlassFish Server - Server Running\nGlobal Management System 9.3 Login\nGlobalProtect Portal\nGoAnywhere 7.4.0\nGoAnywhere Web Client - Login\n????e-Bridge\n???CHANJET_Remote 2017(V6.4.1.0)\n???E-Soonlink 2021???(V7.0.2.1115)\n???MAX??-??\n???TV|??? ??|??? ??|??? ??|?? ?? ??\n??Linux??\n??SecGate 3600???\n??onvif???\n??smartWeb--????\nAAConv Transliteration\nServer: squid/2.7.STABLE9\nServer: squid/3.1.20\nServer: squid/3.1.23\nServer: squid/3.3.8\nServer: squid/3.5.12\nServer: squid/3.5.20\nServer: squid/3.5.25\nServer: squid/3.5.27\nServer: squid/4.10\nServer: squid/4.11\nServer: lighttpd/1.4.28-devel-430M\nServer: lighttpd/1.4.28-devel-4866\nServer: lighttpd/1.4.28-devel-4975\nServer: lighttpd/1.4.28-devel-4979\nServer: lighttpd/1.4.28-devel-4998M\nServer: lighttpd/1.4.28-devel-5072M\nServer: lighttpd/1.4.28-devel-5603\nServer: lighttpd/1.4.28-devel-59460\nServer: lighttpd/1.4.28-devel-606M\nServer: lighttpd/1.4.28-devel-6481\nLinkit Smart\nLinksys SPA Configuration\nLinksys Smart Wi-Fi\nLinksys08686,Simultaneous Dual-Band Wireless-AC Gigabit Router\nLinksys\nLinux Dash : Simple, beautiful server monitoring web dashboard\nLinux Internet Gateway Device,WAN Device on Linux IGD\nLinux Ubuntu 4.4.0-101-generic #124-Ubuntu SMP Fri Nov 10 18:29:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux\nLinux router,Linux router\nLiquid Telecom Zimbabwe 4G\nKOBZ SECURE PROXY\nKP-NVR1625NV\nKP-NVR3245NV\nKSM-Stoker\nKSNW_VPN_Server - LuCI\nKaco Web\nKafka Manager\nKaonMedia Starter\nKarel IPV50\nKeenetic Extra II – Login\nServer: Output-Streamer/0.2\nServer: P-660HW-T1 v3\nServer: PAM360\nServer: PDR-Jseries\nServer: PDR-M800/1.0\nServer: PLKWebServer\nServer: PRAVIS/1.0\nServer: PRTG\nServer: PRTG/13.1.2.1462\nServer: PRTG/19.4.52.3515\n::::: SecuwaySSL U V2.0 :::::\n:\n? ???\n?\n?? - ????\n?? - ?????????????\n?? - EL-ADMIN\n?? - NAStool\n?? - Your Company JIRA\n?? · GitLab\n
  • 日志系统
    • \n
  • 云平台
    • \n\n
    RT-AC5300
    \n
    Sign in with your ASUS router account
    \nPHP Group\nupload_tmp_dir/etc/httpd/_tmp/etc/httpd/_tmp\n$_SERVER['DOCUMENT_ROOT']/mnt/HDD2/web/\n7db3eea5-9996-4032-a9cc-3afd06bd11fe\nPowered by Gibbon v23.0.01\n[fonts]\nConfigSystemCommand\n455\n :no\nD-Link\n
    DIR-629
    \n
    DIR-600
    \n
    \n\nP-660HN-T1A_IPv6\nSSA-3296 192.168.1.33,Digital Video Recorder\nSSID\nSSL VPN Service\nSSL gateway\nST-1001-FL\nSTANNVR-4E 192.168.1.253,1080P Real-time Multi-touch Standalone NVR\nSTERBOX_1 Logowanie\nSTERBOX_2 Logowanie\nSTORAGE\nSTRONG\nIYUU??\nIYUU登陆\nIdentificazione\nIdentity Management\nIgnition-functify - Ignition Gateway\nImaginaSoft Corporation - 2016\nImmortalWrt - LuCI\nIn Blacklist\nInLong\nInbtel\n???? - GLPI\n???? -- EG???--????\n???? ???????? ???????????\n????-???????\n????-??AC????\n????-EWEB????\n????100?-??\n????\n?????! ???? Synology Web Station ?!\n?????-??\nAdvanced Statistics\nAdvantech WebAccess Welcome Page\nAfrihost ClientZone - You have been capped\nAgent Timeclock\nAiCloud\nAir5021,AirTies Wireless Networks Router\nAirTies Air4420v2\nAirTies\nAirties\nAlarm Panel\nMy NAS\nMy PHP Installation\nMyFood\nMyGitea\nMyHome Bticino\nMyPortfolio\nMytiendaglobal |\nN2-100-??\nN2-100-高恪\nN4560,N4560 IP Storage Server\nServer: BlueIris-HTTP/1.1\nServer: BlueServer/4.8.6.3\nServer: BlueServer/5.1.0.4\nServer: BlueServer/5.3.2.9\nServer: BlueServer/5.5.4.1\nServer: Boa\nServer: Boa/0.92o\nServer: Boa/0.93.15\nServer: Boa/0.94.101wk\nServer: Boa/0.94.11\nCWP |用户\nCalibre-Web | Login\nCalibre-Web | login\nCamera Login\nCarrier Class Wireless Home Networking Technology\nCarro de Pedidos - PBX Hosting\nCasaOS\nCasdoor\nCast shell remote debugging\nCentaur3\nServer: Linux/3.10.0_s40 UPnP/1.0 Portable SDK for UPnP devices/1.6.12\nServer: Linux/3.18.20, UPnP/1.0, Portable SDK for UPnP devices/1.6.21\nServer: Linux/4.4.180+, UPnP/1.0, Portable SDK for UPnP devices/1.12.1\nServer: Linux/4.9.84, UPnP/1.0, Portable SDK for UPnP devices/1.14.0\nServer: Linux/5.10.60-qnap,UPnP/1.0,PortableSDKforUPnPdevices/1.6.22\nServer: LiteSpeed\nServer: Lotus-Domino\nServer: MAGI 1.0\nServer: MIIPS-2\nServer: MQCache/2.1.0\nDingtalk Server\nDirect IP access not allowed | Cloudflare\nDirectory /\nDirectory listing for /\nDiskStation (DS114),Synology NAS\nDiskStation (DS3617xs),Synology NAS\nDiskStation,Synology DLNA/UPnP Media Server\nDiskStation\nDiskStationGao - Synology DiskStation\nDiskStation - StarBrand\nUAS\nUN1200X-AC\nUNAUTHORIZED\nUNRAIDS/Login\nUPADHYAY-OLT1\nUPNP HDS-2020IRPW - 690240459,IP Camera\nUPNP HDS-2420IRPW - 119835180,IP Camera\nUPnP Digital Video/Audio Recorder,4 Channel(SD) H.264 DVR(ports:67/68/80)\nUPnP Digital Video/Audio Recorder,8 Channel(SD) H.264 DVR(ports:67/68/80)\nUSG FLEX\nServer: lighttpd/1.4.29\nServer: lighttpd/1.4.29-devel-11732M\nServer: lighttpd/1.4.29-devel-12083M\nServer: lighttpd/1.4.29-devel-13431M\nServer: lighttpd/1.4.29-devel-15110M\nServer: lighttpd/1.4.29-devel-152\nServer: lighttpd/1.4.29-devel-159\nServer: lighttpd/1.4.29-devel-17669M\nServer: lighttpd/1.4.29-devel-18118M\nServer: lighttpd/1.4.29-devel-18831M\nJAWS/\nJCG JHR-AC836PRO.V2 - 登录\nJCG JHR-AC876M - 登录\nJCG JHR-N835R - 首页\nJCG JYR-AC520 - 登陆\nJCG Wireless Router\nJJhome - Apps\nJMER Clouds\nJT NAS\nJXNAS - Synology NAS\nWeb-Client\nWeb-based Management\nWeb\nWebCam\nWebDriver Hub\nWebFig\nWebPro\nWebmail Login\nWebmail | Bangladesh Army\nWebsite Unavailable\n\"Powered by vBulletin Version 5.5.4\"\n789551\nLinear eMerge\nSuperSign\nubiq\nYacht\nZeroshell\nFastWeb\nAuthInfo:\nloadingIndicator_bk\n孚盟云 - 用户登录\n安网-智能路由系统\n安网科技-智能AC管理系统\n景云网络防病毒系统\n智慧综合管理平台登入\n智能排班系统\n欢迎您使用OneinStack\n物联网平台\n物资管理\n璁よ瘉澶辫触\n

    .

    \n

    ..

    \n

    18881

    \n

    cmdline

    \n

    cpuinfo

    \n

    devicesdevices

    \n

    versionversion

    \n\n///\n[\nOK profile1rate\nOK profile1qmode\nOK profile1quality\nOK profile2format\nOK profile2resolution\nOK profile2view\nOK profile2rate\nOK profile2quality\nOK audiotype\nOK audioinenable\nNebula\nNeptune-v2 Login\nNet Video Browser\nNet Viewer\nNetArchive Project\nNetComm Wireless Limited\nNetComm Wireless Router\nNetDvrV3\nNetMizer ????\nNetMizer 管理系统\nEFM Networks ipTIME V504\nEG8141A5\nEG8145V5\nEG8245H5\nEL-ADMIN\nEMQX Dashboard\nEOC-WIFI\nEPON\nEPWDICT\nESG-NVR16P-4\nSet-Cookie: loginName=admin\nvar fgt_lang = /dev/cmdb/sslvpn_websession\nphp 8.1.0-dev exit\nspringframework\nTomcat\nDEVICE.ACCOUNT=admin\nAUTHORIZED_GROUP=1\n\nAdmin\n\nFI9800P+V3\n2.84.2.33\n1.12.5.2\npmaversion = '4.6.0';\n\"token\" value=\"yJpdiI6IkZpeaasdf1sdfbs\"\ntoken=yJpdiI6IkZpeaasdf1sdfbs$\nWelcome to\n\"Hello, Peppa!\"\nvar user_passwd=\"YWRtaW4=\";\nSUCCESS\nTeltonika-TRB142.com - Administration\nTenda 11N Wireless Router Login Screen\nTenda Wireless-N Broadband router,Tenda Wireless-N Broadband router\nTenda Wireless-N Router,Tenda Wireless-N Router\nTenda | LOGIN\nTenda | Login\nTenda\nThe Best Online Casinos for USA Players\nThe Cross Web Server\nThe Parrots UI3\nServer: synopc\nServer: t1-httpd/1.4.43\nServer: thttpd\nServer: thttpd-2.25b\nServer: thttpd-alphanetworks/2.23\nServer: thttpd/2.04 10aug98\nServer: thttpd/2.19-MX Apr 26 2011\nServer: thttpd/2.19-MX Apr 30 2015\nServer: thttpd/2.19-MX Aug 12 2004\nServer: thttpd/2.19-MX Aug 28 2014\nNETSuveillance WEB\nNETZEN\nNOBREIPTV\nNOVIcam WEB\nNPort Web Console\nNR5G Router\nNRF301-08E\nNS-YN201,wifi router\nNSA310\nNSA310S\n??(WayOS)???????? www.wayos.cn\n??(WayOS)???????? www.wayos.cn\n??(WayOS)???????? www.wayos.com\n??(WayOS)?????WiFi?? www.wayos.cn\n??-??????\n??\n??? ???? ???\n??? ?????? ?????????\n???-???\n???\nFS-1G XPON\nFS-821GWV-D\nFSO1,Simultaneous Dual-Band Wireless-AC Gigabit Router\nFStorage\nFTTX Router XPON-1G\nFU HDTVI 8008F1-S2 192.168.1.109,Digital Video Recorder\nFUSION_14605\nFWR200\nFWR7102 Login\nFXC AccessEdge ????\n\t\t\t\t\t\t
    日本語
    \n\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t\t\t\n\t\t\t\t\t
    \n\t\t\t\t\n\t\t\t
    \n\t\t\t
    \n\n\t\t\t
    \nServer: httpd\nServer: httpd 1.1\nServer: httpd/2.0\nServer: httpd/3.0\nServer: httpd_four-faith\nServer: httpd_gargoyle/1.0 14mar2008\nServer: httpserver1.0\nServer: huohuo\nServer: hypercorn-h11\nServer: i4m web\nposted data was written to placeholder file\n{\\\"sm_nonce\\\":\\\"62e7518a4e4284979\\\"}\ncsaPostStatus=0\n3V@1\n202cb962ac59075b964b07152d234b70\nLocation: /vimarbyweb/index.php\nlogo\n\"DetectedxuanfengOS: %OS% linux-gnu\"\n{\"os\":\"windows\",\"logo\":\"\",\"appid\":\"skylar6\",\"has_prd_cert\":1,\"console_version\":\"V6.0\"}\nRDWeb\nvirmarh.example.com — Coming Soon\nvtiger CRM 5 - Commercial Open Source CRM\nvue\nw_Login\nwebapp\nwebpackSPA\nwebserver\nwebstring.login\nwelcome\nwinnormal.click\n: Linux, HTTP/1.1, DIR\nCLASSID=\"CLSID:F59544C4-3439-46A7-B723-BE4DAB3FE768\"\nCODEBASE=\"WebClientPro.cab#version=3,4,0,3\"\n\n\n03.08\n03.07\n

    Index of /mnt/web/

    \n

    .

    \n

    ..\nUser Name\n\n\n

    \nPassword\n\n\nHDL - HDL KNX TP IP\nHDS-7204TVI-HDMI 192.168.1.10,Digital Video Recorder\nHDS-7204TVI-HDMI/K 192.168.100.89,Digital Video Recorder\nHDS-7208TVI-HDMI 192.168.100.100,Digital Video Recorder\nHDS-7208TVI-HDMI/N 192.168.1.188,Digital Video Recorder\nHDS-N9632I-4K/8HD 192.168.100.101,Digital Video Recorder\nHDVR(74.129.35.117),UPnP Device\nHFL\nHFS /\nHG253s\n\n\n\n\n\n\n\n
    \n
    Sign In
    \n
    RT-AX56U
    \nOrangeHRM\nP-2612HNU-F1F,WAN Device\nP-660HN-T1A_IPv6\nP400xi\nPBX Hosting Web | Inicio\nPC-LIGUOPENG,Hikvision UPNP Agent for Depolyer\nPC-Series Sensor\nPEC\nPENTAGRAM\nPLC Wireless Router\nServer: lighttpd/1.4.29-devel-3762M\nServer: lighttpd/1.4.29-devel-6565\nServer: lighttpd/1.4.30\nServer: lighttpd/1.4.30-devel-11296M\nServer: lighttpd/1.4.30-devel-15625M\nServer: lighttpd/1.4.30-devel-167M\nServer: lighttpd/1.4.30-devel-19205M\nServer: lighttpd/1.4.30-devel-259M\nServer: lighttpd/1.4.30-devel-263M\nServer: lighttpd/1.4.30-devel-26636M\nPandora FMS Remote Gateway\nPandoraBox_C7BD - LuCI\nPanel Status\nPaperCut Login\nPark Production - Home\nPartners\nPassPhrase\nPassword Recovery\nPassword required\nPayara Server - Server Running\nLTE Router Operation And Management\nLUCIFERISBACKBIATCHZ\nLUKFOOK\nLXWeb????\nLandkey - Responsive Landing Template\nLaofei???\nLaravel\nLarnitech v0.5.0.2\nLeapIOT Edge\nLebo-Media Renderer\nServer: Jetty(i-jetty6.0-1650699557)\nServer: Jetty(winstone-2.8)\nServer: Jetty(winstone-2.9)\nServer: Jetty/3.1.8 (Windows 2000 5.0 x86)\nServer: Jetty/5.1.10 (Windows Server 2008 R2/6.1 amd64 java/1.6.0_31\nServer: Jetty/5.1.10 (Windows Server 2008/6.1 amd64 java/1.6.0_07\nServer: Jetty/5.1.x(Linux/2.6.26-2-686i386java/1.6.0_22\nServer: Jexus/5.8.2.21 Linux\nServer: K1\nServer: K2\nServer: PanWeb Server/ -\nServer: PasteWSGIServer/0.5 Python/2.7.6\nServer: Payara Micro #badassfish\nServer: Payara Server 4.1.1.164 #badassfish\nServer: Payara Server 5.2021.7 #badassfish\nServer: Polycom SoundPoint IP Telephone HTTPd\nServer: Powered by Electronic Arts\nServer: PoweredbyElectronicArts\nServer: Prometheus\nServer: Python/3.10 aiohttp/3.8.4\nServer: HFS 2.1 beta17\nServer: HFS 2.2e\nServer: HFS 2.3 beta\nServer: HFS 2.3c\nServer: HFS 2.4.0 RC6\nServer: HFS 2.4.0 RC7\nServer: HFS 2.4rc2\nServer: HID-Web\nServer: HP HTTP Server; HP ENVY 7640 series - E4W43A; Serial Number: TH73P4S0Q0063T; Built:Tue May 26, 2020 07:08:30AM {NSM2CN2022AR}\nServer: HP HTTP Server; HP HP OfficeJet Pro 8720 - D9L19A; Serial Number: CN81HC6060; Built:Wed Jan 27, 2021 02:31:26PM {WMP1CN2105AR}\nDefault Site\nDefault Web Site Page\nDefault\nDell OpenManage\nDell SonicWALL - Authentication\nDesignable Playground\nDev\nDevNavi\nDevice Client\nDevice Summary | Xerox VersaLink C625 Color MFP (FC:24:2F)\n1FE+1GE+Wifi\n1GE+3FE+WIFI\n1GE+Wifi\n1GE-GPON-ONU\n1NVR8P4KP8\n2+1POST-XPON\n200 OK\n22NoluKios (build 3249M) - Bilgi\n25 Grams Cold Brew Coffee\n28ZE\nServer: gunicorn/19.7.0\nServer: gunicorn/19.8.1\nServer: gunicorn/19.9.0\nServer: gunicorn/20.0.4\nServer: gunicorn/20.0.4 831\nServer: h2o/2.3.0-DEV@1d12c355\nServer: hidden\nServer: hmhttpd/1.24-20160808\nServer: hts_server\nServer: http server 1.0\nServer: WSGIServer/0.2CPython/3.7.0\nServer: WSO2 Carbon Server\nServer: WSTL CPE 1.0\nServer: WVS\nServer: WWW Server/1.1\nServer: WYF\nServer: Web Hosting by Dot Enterprise Co.,Ltd (http://www.de.co.th/)\nServer: Web Server\nServer: Web Server 1.1\nServer: Web Server/1.0\nnt authority\\system\n2l0I1SczIudyqkhJ5vdqsXq0OV8\nSEC Explorer 666\n/home/locationIndex.action\nOpenMetadata\nfart\nc8c605999f3d8352d7bb792cf3fdb25b\nFaris on the mic :D\n('').attr('root')\n2k32hiQWfLomfwa97XyIQ5xDfFY\nLog In - Juniper Web Device Manager\nLog In to AR Web\nLog in - VMware ESXi\nLog in to Common Router - Hitron Technologies\nLog in | Telerik Report Server\nLog in | Xtream Log Server\nLogicMove - Login\nLogin — BoidCMS\nLogin - AppNode\nLogin - Appsmart Ophthalmology EMR\nADSL Router\nADSL2+ WIFI-MODEM WITH 3G/4G USB PORT\nAHD LOGIN\nAI Box\nAI Design Pro\nAIPC(CTR-600)\nAJ PARK\nALFA-R36,USB Wi-Fi Router\nALT-FD504GW-X-Z410\nAList\nPromociones\nProxy Scanning in progress\nPulse Connect Secure\nPyramid Debug Toolbar\nPřihlásit se\nQ6IIemmc,UPnP HiMultiScreen Device 1.0\nQCMAP Login Web Page\nQDlna AV Media Renderer Device\nQMAD\nQNAP Turbo NAS\nServer: Allegro-Software-RomPager/4.30\nServer: Alpha_webserv\nServer: Apache\nServer: Apache (Red Hat Linux)\nServer: Apache-Coyote/1.1\nServer: Apache/1.3.28 (Unix) mod_ssl/2.8.15 OpenSSL/0.9.8d\nServer: Apache/1.3.31 (Unix)\nServer: Apache/2.0.43 (Win32) mod_jk/1.2.2-beta-1\nServer: Apache/2.2.0 (Unix) mod_ssl/2.2.0 OpenSSL/0.9.7g PHP/5.1.1\nServer: Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/5.2.6\nNetMoni.One\nNetPremise DTE\nNetScaler AAA\nNetScaler Gateway\nNetcore\nNeterbit NSL-224\nNetgate pfSense Plus - Login\nNetgear Prosafe Plus Switch\nNetgear WC7500\nNetis路由器\nServer: Linux UPnP/1.0 Huawei-ATP-IGD\nServer: Linux, HTTP/1.1, DIR-850L Ver 1.13\nServer: Linux,STUNNEL/1.0,DIR-850LVer1.06\nServer: Linux,STUNNEL/1.0,DIR-850LVer1.13\nServer: Linux,STUNNEL/1.0,DIR-860LVer1.07\nServer: Linux,WEBACCESS/1.0,DIR-850LVer1.06\nServer: Linux,WEBACCESS/1.0,DIR-850LVer1.13\nServer: Linux,WEBACCESS/1.0,DIR-850LVer1.15\nServer: Linux,WEBACCESS/1.0,DIR-860LVer1.07\nServer: Linux/#33 SMP PREEMPT Mon Mar 21 11:19:42 CST 2022 UPnP/1.0 Broadcom UPNP/0.9\nGPON Home Gateway\nGPON ONT\nGPON-ONU\nGPON\nGPS??????????\nGPS服务平台用户身份认证\nGQ\nGR3200????\nGSDS-86308 192.168.1.110,Digital Video Recorder\nGSX (c)2015\nWelcome to zentao!\nWelcome | PRTG Network Monitor (SZ-CLIENT-CHA)\nWelcome:\nWelcome\nWelcome to WEIBANG\nWi-Fi Disk\nWi-Fi Web??\nWiDrawer\nWifi Connection Solutions | Wifi Connection | Wifi solutions South Africa\nWillRouter - LuCI\nBitMain\nBitcoin Miner\nBitnami: Open Source. Simplified\nBitwarden Web Vault\nBlogxer\nBlue Iris Login\nBoutique Érotique\nBrazilFW Web Administrator\nBrevrick-NAS\nBroadBand Device Webserver\nDiskStation - Synology DiskStation\nDocker Registry UI\nDockerDSM1,Synology DLNA/UPnP Media Server\nDocument Moved\nDocument\nDocumentos Electrónicos\nDooTask\nDownload EasyConnect\nDreambox\nEAA(EHE Application Access System)\nServer: Python/3.11 aiohttp/3.8.5\nServer: Python/3.7 websockets/10.1\nServer: Python/3.8 aiohttp/4.0.0a1\nServer: QWS\nServer: Qualvision -HTTPServer\nServer: REST-Webs\nServer: RG/Device 10.x\nServer: RGOS HTTP-Server/1.1\nServer: RSS-Webs/1.4b78p13\nServer: RTK Web 0.9\nTransPort WR11 (SN: 754181) Configuration and Management\nTransPort WR11 (SN: 754319) Configuration and Management\nTribe\nTripMate Nano\nTrying to Configure the Range Extender? | TP-Link\nTurkcell Güvenli Internet\nTwonky Server\nU+tv UHD2\nU-NAS Management Center\nU8C\nadmin\n\ncpto /tmp/\"root\"\nModel=AC1450\nFirmware=V1.0.0.36_10.0.17\n\"exceptionMessageValue\":\"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found.\"\nBIG-IP release 15.0.0\nuser:root\n12345admin123'\nFailed to process image\nnet-school\nnetcallServer ?????\nnetis ADSL Modem Router\nnetis Wireless N router\nnetis router\nnetns-pppoe-converge netdata dashboard\nnginxWebUI\nnginxwebui\nnvr\nont\nUntitled Document\nUnvisitedNativity is a Tor Exit Router - or not.\nUpdate Success!\nUploader by Zeerx7 ~ XploitSec-ID\nUpnpManager,UPnP Device\nUseUserCredential\nUser Authentication\nUser Login\nUser Password\nUser Portal\nXWebPlay\nXWikiLogin - XWiki\nXX230v\nXenMobile\nXerox WorkCentre 3655\nXerox(R) C235 MFP\nXiaomi MediaRenderer\nXpon-Dual-Band\nXpon-ONU-1GZ-V3\nYApi-????????????????????\n \n \n \n \n\n22.7R2.0\n
    downloadLog_154Log_154
    \n\n
    \n \nAccel-PPP\nAccess Denied\nAccesso\nAccount Suspended\nAcessar ‹ ThePW — WordPress\nAcessar ‹ ThePW — WordPress\nAcorn Management\nAdm_ID\nAdmin Console\nAdmin:\nBB-SW175 Network Camera\nBCM963xxDSLRouter\nBCMS?????????\nBD-ONT-414GWT-AC\nBES460\nBEWARD Network HD camera\nBIG-IP®- Redirect\nBIG-IP®- Redirect\nBLS\nBLUEBOX\nNice Guarita\nNisuta 150Mbps Wireless N ADSL2+ Modem Router\nNoName,PSTEK Digital Signage\nNoVus IP camera\nNode Exporter\nNode-RED\nNortorial - Login\nNot Found on Accelerator\nNot Found\nNotes\nvar authLevel2=\"3\";\nvar name3=\"CallServ\";\nvar password3=\"1234\";\nvar authLevel3=\"3\";\nvar name4=\"Samping\";\nvar password4=\"1234\";\nvar authLevel4=\"3\";\nvar name5=\"\";\nvar password5=\"\";\nvar authLevel5=\"3\";\nServer: Miniwebserver2.0CDATAcorp2017.\nServer: MobileSMARTS/5.2.46.14758 Microsoft-HTTPAPI/2.0\nServer: MochiWeb/1.0 (Any of you quaids got a smint?)\nServer: Mongoose/6.11\nServer: Mongoose/6.6\nServer: MoxaHttp/1.0\nServer: MoxaHttp/2.2\nServer: MoxaHttp/2.3\nServer: NBB-414\nServer: NVR EXT SERVER\nServer: mini_httpd/1.17beta1 26may2002\nServer: mini_httpd/1.18\nServer: mini_httpd/1.19 19dec2003\nServer: mini_httpd/1.19-1 17jun2020\nServer: mini_httpd/1.19/bhoc 23sep2004\nServer: mini_httpd/1.1919dec2003\nServer: mini_httpd/1.21 18oct2014\nServer: mini_httpd/1.22 19Oct2015\nServer: mini_httpd/1.23 28Dec2015\nServer: mini_httpd/1.24 10May2016\niphone-test\njiahui-ui\njshell ver 0.1\nk0nslNET default page\nkapranoff.me-\nkeywebtor4.artikel5ev.de\nkiosk_edge_gui\nkomlo4-pw.ddns.net - Web UI\nksAC2100 - LuCI\nkslspve - Proxmox Virtual Environment\nServer: uc-httpd/1.0.0\nServer: uc-httpd1.0.0\nServer: udpxy 1.0-23.10 (prod) standard [Linux 3.18.67 x86_64]\nServer: uhttpd/1.0.0\nServer: ulwsd/1.0.1-20140331\nServer: ver2.4 rev0\nServer: ver2.4rev0\nServer: vws 1.7.12\nServer: w3httpd/1.0\nServer: waitress\nacunetixshellshock\nwindow.parent.location.href = \"http://120.46.215.52/XXWYNKXBCTLGHRPC/userRpm/Index.htm\";\nurer\n48saqp716utvziy93s2ar9zjjgz\nName Alias ServerName ProhibitSendQuota\n---- ----- ---------- -----------------\ndenpyer denpyer anlpr92ac8l0 unlimited\nPMA_VERSION:\"4.8.1deb5ubuntu0.5\"\nlabel:\"(Debug)\"\n\nDIR-615\nDIR-822\nDIR-841\nDIR-842\nDIVA Web Configuration\nDLNA-Player-MediaCenter,Intel AV Media Renderer device\nDM985-100\nDM985-424 HW2\nDMM-1000\nDNP ePort - C?ng Ði?n T? C?ng Ðà N?ng\nServer: wanduck\nServer: web\nServer: web cache\nServer: web server\nServer: webcache\nServer: webfs/1.21\nServer: webs\nServer: webs/\nServer: webserver\nServer: webserver/0.0.0\nPM130 Ethernet module Web configuration\nPM43:PM4318422045113\nPON Home Gateway\nPOSNAYKO\nPRIVATE\nPRTG-Login\nPVE - Proxmox Virtual Environment\nPVZoom HD Dual-E\nPagos — Airnet\nPanabit\n\n\n\n\n\n\"etcdserver\": \"3.5.1\"\n\"etcdcluster\": \"3.5.0\"\nWww-Authenticate: Digest qop=\"auth\", realm=\"Modem@AirLink.com\", nonce=\"c51a9a66f1e8db196df6c57a5401d368\"\nisRunning\nSplunk\nThe Shadowserver Foundation\nThinkPHP\nThis Is A Tor Exit Node Named Basil\nThis connection is not secure!\nThis is a TOR exit node server\nThis is a Tor Exit Router - or not.\nThis is a Tor Exit Router\nThis is a Tor exit relay\nThis network runs a TOR Exit Node\nThyme login\n
    \n/root\nuid=13883(root) gid=13883(root) groups=13883(root)\nuid=13883(rootxx) gid=13883(rootxx) groups=13883(rootxx)\n62318aca2ef2e809a13623715a8aaff4\n62318aca2ef2e809\na13623715a8aaff4\nmuie1976\nif('1' == '0' || 'admin' == 'admin')\n
    \nServer: 4D/18.3.0\nServer: 4fd7d672-bbd6-f059-9dff-51e02d6e25ee\nServer: 58f5b853-36b6-597e-16c6-4610e7fd83a4\nServer: 728/09824 HTTP Server version 2.0 - TELDAT S.A.\nServer: 728/09824HTTPServerversion2.0-TELDATS.A.\nServer: A8000\nServer: ADB Broadband HTTP Server\nServer: APN HTTPD V1.4\nServer: APPWebs/\nServer: AR\nServer: Boa/0.94.13\nServer: Boa/0.94.14\nServer: Boa/0.94.14rc18\nServer: Boa/0.94.14rc18-ipcam\nServer: Boa/0.94.14rc18-tortek-r1\nServer: Boa/0.94.14rc18uC\nServer: Boa/0.94.14rc19\nServer: Boa/0.94.14rc20\nServer: Boa/0.94.14rc21\nServer: Boa/0.94.7\nServer: BRCM HTTP Server\nServer: BackupSystem\nServer: BarracudaHTTP 4.0\nServer: BaseHTTP/0.3 Python/2.7.10\nServer: BaseHTTP/0.3 Python/2.7.17\nServer: BaseHTTP/0.3 Python/2.7.5\nServer: BaseHTTP/0.6Python/3.8.5\nServer: Beaver\nServer: BigIP\nServer: BitNinja Captcha Server\nSunrise\nSunshine\nSuperset\nSurveillance Client\nSurveillance Device\nSurveillance\nSwagger UI\nSymantec Web Gateway\nSyncThru Web Service\nSynology Photos\nServer: Jetty(9.2.14.v20151106)\nServer: Jetty(9.3.5.v20151012)\nServer: Jetty(9.3.z-SNAPSHOT)\nServer: Jetty(9.4.33.v20201020)\nServer: Jetty(9.4.43.v20210629)\nServer: Jetty(9.4.44.v20210927)\nServer: Jetty(9.4.9.v20180320)\nServer: Jetty(9.4.z-SNAPSHOT)\nServer: Jetty(i-jetty 3.8)\nServer: Jetty(i-jetty 6.0-1570509416)\nZero Touch Provisioning\nLinux PA-VM 4.18.0-240.1.1.20.pan.x86_64 #1 SMP Wed Jul 31 20:37:12 PDT 2024 x86_64 x86_64 x86_64 GNU/Linu\nredirect_to\nVMG3312-T20A\n\n\nSuccessfully saved\nurl: '/reqproc/proc_get'\nShareCenter\n2024/11/09 12:52_vuln_weaver_com.weaver.formmodel.apps.ktree.servlet.KtreeUploadAction\nServer: Docker/18.09.4 (linux)\nServer: Docker/19.03.8 (linux)\nServer: Docker/19.03.9 (linux)\nServer: Docker/20.10.2 (linux)\nServer: Docker/20.10.6 (linux)\nServer: Dptechserver\nServer: Dr.COM Server\nServer: E2EE Server 2.0\nServer: E2EE WebSocket Server/0.7.0\nServer: EZproxy\nCSRFPreventionToken: 'null'\n};\nif (typeof(PVE) === 'undefined') PVE = {};\nExt.History.fieldid = 'x-history-field';\nExt.onReady(function() { Ext.create('PVE.StdWorkspace');});\nFields required for history management\n\n\n\nvar BC_IP_PORT = 9000;\n\n\n\n\n\n\n\n\n\n\nvar userSet_size=\"5\"\nvar User_index=new Array(10);\nvar User_username=new Array(10);\nvar User_password=new Array(10);\nvar User_privilege=new Array(10);\nUser_index[0]=\"1\";\nUser_username[0]=\"admin\";\nUser_password[0]=\"admin\";\nUser_privilege[0]=\"1\";\nUser_index[1]=\"2\";\nServer: squid/4.13\nServer: squid/4.13-VCS\nServer: squid/4.14\nServer: sslvpn 1.0\nServer: sthttpd/2.27.0 03oct2014\nServer: streamserver\nServer: success web server/1.0.0\nServer: sundray\nServer: sw-cp-server\nServer: swoole-http-server\nServer: lighttpd/1.4.42-devel-13287\nServer: lighttpd/1.4.42-devel-1350\nServer: lighttpd/1.4.42-devel-13659\nServer: lighttpd/1.4.42-devel-1409\nServer: lighttpd/1.4.42-devel-14157\nServer: lighttpd/1.4.42-devel-14460\nServer: lighttpd/1.4.42-devel-15924\nServer: lighttpd/1.4.42-devel-5952\nServer: lighttpd/1.4.42-devel-7168\nServer: lighttpd/1.4.42-devel-7603\nlost+found\nlib64\nlib\nhome\netc\ndev\nda1\nboot\nbin\n\t\nactivity-manage-web\nadmin [Jenkins]\nafterdark - Proxmox Virtual Environment\napi_managment\napp01: Zabbix\nartikel5ev.de Tor Exit\ncAdvisor - /\ncMT\ncPanel Login\ncalibre\nServer: lighttpd/1.4.28 atos/5.6.36 (server0)\nServer: lighttpd/1.4.28-devel-10177\nServer: lighttpd/1.4.28-devel-11602\nServer: lighttpd/1.4.28-devel-13389\nServer: lighttpd/1.4.28-devel-1344\nServer: lighttpd/1.4.28-devel-135:137M\nServer: lighttpd/1.4.28-devel-1364M\nServer: lighttpd/1.4.28-devel-14932\nServer: lighttpd/1.4.28-devel-1562\nServer: lighttpd/1.4.28-devel-1624M\nServer: lighttpd/1.4.42-devel-10935\nServer: lighttpd/1.4.42-devel-10975\nServer: lighttpd/1.4.42-devel-10982\nServer: lighttpd/1.4.42-devel-10994\nServer: lighttpd/1.4.42-devel-10997\nServer: lighttpd/1.4.42-devel-11008\nServer: lighttpd/1.4.42-devel-11017\nServer: lighttpd/1.4.42-devel-11018\nServer: lighttpd/1.4.42-devel-11021\nServer: lighttpd/1.4.42-devel-12746\n\nSolr Admin\ndocument.write(\"Home Gateway\");\ndocument.write(\"家 庭 网 关\");\n\n\nAdmin:\nMLog\ndeadbeaf\njava.lang.ProcessBuilder\n?????\n??????\n???????\n????????\n??????????\n???????????\n????????????!\n??????????????\n????????ESLSoft 2020???(V7.0.2.0)\n?????OneinStack\n
    RT-AC5300
    \n
    RT-AC56U
    \n
    RT-AC66U B1
    \n
    RT-AC66U_B1
    \n
    RT-AC67U
    \n
    RT-AC68P
    \n
    RT-AC68R
    \n
    RT-AC68U
    \n
    RT-AC68W
    \n
    RT-AC87R
    \nEltex - NTE-RG-1421G-Wac\nEltex - NTP-RG-1402G-W:rev.C\nEltex - NTU-RG-1402G-W\nEltex - NTU-RG-1421G-Wac\nEltex GPON ONT,(null)\nEmby - ns340537,UPnP/AV 1.0 Compliant Media Server\nEmby\nEndpoint Security Required\nEntrar\nErgelis Embedded Interpreter\nServer: TwistedWeb/18.4.0\nServer: TwistedWeb/19.7.0\nServer: TwistedWeb/20.3.0\nServer: TwistedWeb/8.2.0\nServer: UCM6102 Configuration | Login\nServer: UPnP/1.0 DLNADOC/1.50\nServer: Unknown\nServer: Unknown-Webserver/1.0\nServer: Unkown\nServer: VA Web Server\nipTIME A2004NS-R\nipTIME A2004SE\nipTIME A3004T\nipTIME A5004NS-M\nipTIME N104plus KTT\nipTIME N104plus-i\nipTIME N604 Black\nipTIME N704E/N704E plus\nipTIME T5004\nipTIME V504\n\n\nContent-Type: command/reply\n\nReply-Text: +OK accepted\n\n\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)\n007b2000-007c1000 rw-p 00000000 00:00 0\nSize: 60 kB\nVMS?????\nVMS管理仓系统\nVMware ESXi\nVNC Viewer for Java\nVOS2009\nVOS3000\nVOUK-NAS (DS716+),Synology NAS\nVPN Plus\nVPN Portal\nVR-S1000 - BUFFALO BroadStation Pro\nWeb Server Setup Guide\nWeb Server's Default Page\nWeb Server\nWeb Services\nWeb Site Blocked\nWeb Viewer for DVR\nWeb Viewer for Samsung DVR\nWeb Viewer\nWeb user login\nWeb-Based Management\nCAM6082QIR,MAC:00-0F-0D-2A-64-37\nCBX Cloud\nCDMS SERVER\nCDVI\nCFMBOX Web Control Server\nCGISESSID\nCHAOS\nCK ??\nCK 工具\nCMS Web Viewer\nreCAPTCHA\nreplace\nrtsp?rtmp???\nruianzhu-??\nseckill\nserver - Proxmox Virtual Environment\nshikuIM\nshop\nsimpusun\nsupermall\nOK micgain\nOK audiooutenable\nOK audiooutvolume\nOK videocodec\nOK wintimezone\nOK timefrequency\nOK setdaylight\nOK sntpfqdn\n== Changelog ==\n6.7\n\nAddPortMapping('58969', '58969', '192.168.1.101') => OK\n120.46.215.52\n 14:01:07 up 2 days, 21:19, 2 users, load average: 0.26, 0.10, 0.07\n7398924\n3.9G\n756422\n\n\n + ID_VC_Welcome + \nSMCWBR14S-N4,Draft 11n Wifi Router\nSNET-4111Z\nSNET-4211Z\nSOPlanning - Simple Online Planning\nSPC4300 - MicroComp\nSPECO WEB SETUP\nSPORTING NEWS – News from sports world – now updated daily!\nSRB-E04\nSRI KRISHNA DEPARTMENTAL STORES\nSRS\nDevice(IMBRA GATA)\nDevice(Imbra ute Bod)\nDevice(Vendes Grange)\nDevice(Vendes salon)\nDeviceBasicInfo\nDhWebCookie\nDigital China\nDigital Workplace\nDimix ERP ????\nDimix ERP 办公系统\n网心云设备\n致远A8+协同管理软件.A6\n船舶管理系统\n艾泰科技\n蓝海卓越计费管理系统\n迈普通信技术股份有限公司\n远程通CHANJET_Remote 2017(V6.4.1.0)\n锐捷网络 -- EG易网关--登录界面\n锐捷网络-EWEB网管系统\n锐捷网络\n\nCopyright (c) 2013, 2018 by Cisco Systems, Inc.\nAll rights reserved.\nyyoa\n{\"success\":true}\nStable tag: 2.8.2\nvar um_scripts = {\"max_upload_size\":\"8488608\",\"nonce\":\"95039b0c1d\"};\nlaravel\ncurrent date is Wed Feb 28 12:41:46 PM CST 2024\nvar WIRELESS_AP_MODE=0;\nvar WIRELESS_CBRIDGE_MODE=1;\nvar WIRELESS_CWAN_MODE=2;\nvar WIRELESS_KAI_MODE=3;\nvar WIRELESS_MBRIDGE_MODE=4;\n\nIP Camera:\n Brand: D-Link\n Model: DCS-2332L\n Product: Megapixel Internet Camera\nsys\nsrv\nservice\nsbin\nrun\nroot\nproc\nopt\nmnt\nmedia\nSAMEORIGIN\nWR841N\nWR740N\nLinksys\nWAP300N\nWAP610N\nWES\nWET\nnetgear\n_2netgear\nNETCORE NR286,NETCORE NR286\nNETCORE NR289-GE,NETCORE NR289-GE\nNETCORE NW715P,NETCORE NW715P\nNETCORE NW735,NETCORE NW735\nNETCORE NW736,NETCORE NW736\nNETCORE T1,NETCORE T1\nNETGEAR GS310TP\nNETGEAR GS748Tv5\nNETGEAR ProSafe™ - NETGEAR Configuration Manager Login\nNETGEAR R6400\nASUS Wireless Router GT-AC2900 SH\nASUS Wireless Router GT-AC2900\nASUS Wireless Router GT-AC5300\nASUS Wireless Router GT-AX11000\nASUS Wireless Router GT-AX6000\nASUS Wireless Router RT-N12C1 - Quickly Internet Setup\nASUS Wireless Router TUF-AX3000 V2\nASUS Wireless Router TUF-AX3000\nASUS Wireless Router TUF-AX5400\nATV@100,WaxRainPlayer\nServer: lighttpd/1.4.32 atos/6.1.9.20 (server0)\nServer: lighttpd/1.4.32 atos/6.1.9.21 (server0)\nServer: lighttpd/1.4.32 atos/6.1.9.23 (server0)\nServer: lighttpd/1.4.32 atos/6.1.9.24 (server0)\nServer: lighttpd/1.4.32-SATO_r17-3-gcadb4bb\nServer: lighttpd/1.4.32-devel-12165M\nServer: lighttpd/1.4.32-devel-1998\nServer: lighttpd/1.4.32-devel-20015M\nServer: lighttpd/1.4.32-devel-2275\nServer: lighttpd/1.4.32-devel-2673\nIPOX\nIPRENT - ??????HTTP?????????\nIPSec Settings\nIPTV+572659\nIR0ZXU - Modi Digitali Cruscotto\nIR615-S-EN00-WLAN -> ??\nIR615-S-EN00-WLAN -> 登录\nIRZ RUH 3G Router\nISC2500-S\nISOFH - PK ÐK YTCC\nMTM-Embedded - Home\nMTR\nMTS Running Status Report\nMVNAS_II - Synology DiskStation\nMVNAS_II - Synology DiskStation\nMW155R\nMW301R\nMW325R\nMacrec DVR - Web view\nMahindra Comviva\nTnT-102GE\nTnT-323DBG-GEXPON\nTnas-000025\nTop\nTopAccess\nTor Exit Server tor-exit-se1.privex.cc\nTor-Proxy Exit Notice\nToumaiTrack\nTraefik\nTransPort WR11 (SN: 728533) Configuration and Management\nServer: Resin/3.0.19\nServer: Resin/3.1.12\nServer: Resin/3.1.6\nServer: Resin/3.1.8\nServer: Resin/4.0.36\nServer: Resin/4.0.40\nServer: Resin/4.0.58\nServer: Restlet-Framework/2.0.13\nServer: Restlet-Framework/3.0m1\nServer: Roku/10.0.0 UPnP/1.0 Roku/10.0.0\nRedirect To Login Page\nRedirect to guestimage: /cgi-bin/guestimage.html\nRedirected\nRedirecting to OrientDB Studio...\nRemote Console on LAN\nRemote Management Center\nRemote Web Access\nRent Guarantee,rentguarantee\nReolink\nRepetidor Wireless TP-LINK WA850RE\n\njava.lang.reflect.InvocationTargetException\nFailed to read result object: null\nSetup Successful\n\nPRTG\nQNAP-NAS\nclean\nUSERNAME=admin\nPASSWD=21232f297a57a5a743894a0e4a801fc3\nServer: SRS/5.0.98(Bee)\nServer: SY8033\nServer: SY8045\nServer: Safedog WAF\nServer: Safedog/4.0.0\nServer: Saia PCD2M5540/1.10.16\nServer: Saia PCD3.M5340/1.16.69\nServer: Sanechips-Webs\nServer: Sanoil Bayi Portal\nServer: Satrack\nReportería Raster\nReposify : Discover IoT Anywhere\nResidential Gateway Configuration - Login\nResidential Gateway Login\nRiskscanner\nRocketMQ-Dashboard\nRocketMQ\nRocketMq-console-ng\nRomPager Embedded Web Server Toolkit\nRomPager/4.07 UPnP/1.0\nWatchGuard Access Portal\nWave\nWazo - [phonesystem-master]\nWeave Scope\nWeb user login\nWeb Admin | Welcome\nWeb Admin\nWeb Administration Interface\nWeb Application Manager\nWeb Based HMI/SCADA Server\nApache Druid\nApache HTTP Server Test Page powered by CentOS\nApache InLong\nApache Tomcat/10.0.0\nApache Tomcat/7.0.103\nApache Tomcat/8.5.88\nApache Tomcat/9.0.55\nApache Tomcat\nApertureData Platform\nAppServ Open Project 8.6.0\nServer: Werkzeug/0.16.1 Python/3.8.10\nServer: Werkzeug/0.8.3 Python/2.6.3\nServer: Werkzeug/0.9.4 Python/2.7.6\nServer: Werkzeug/1.0.1 Python/3.8.2\nServer: Werkzeug/2.0.1 Python/3.6.9\nServer: Werkzeug/2.0.1 Python/3.7.11\nServer: Werkzeug/2.2.3 Python/3.10.11\nServer: WhoAmI\nServer: WildFly/10\nServer: WildFly/8\nIndex of /\nIndex\nIndex_Page\nInfluxDB\nInformation\nIniciar sesión\nIniciar sessão\nInicio Sesión\nInicio de sesión\nInitializing...\nServer: MiniServ/0.01\nServer: MiniServ/1.610\nServer: MiniServ/1.941\nServer: MiniServ/1.970\nServer: MiniServ/1.990\nServer: MiniServ/2.000\nServer: Miniwebserver1.0CMIOTcorp2018.\nServer: Miniwebserver1.0Skyworthcorp2017.\nServer: Miniwebserver1.0ZTEcorp2005.\nServer: Miniwebserver1.0ZXICcorp2005.\nvar name6=\"User6\";\nvar password6=\"8ni3eK\";\nvar authLevel6=\"3\";\nvar name7=\"User7\";\nvar password7=\"zeszeK\";\nvar authLevel7=\"3\";\nvar syspasswd=\"admin\";\nvar productid=\"HHDQV\";\nvar vendorid=\"QVIPCAM\";\nvar serialNum=\"al09026c29\";\nHTTP/1.0 302 Moved Temporarily\nERROR:you have logined!\nCOMPLETED\n/themes/oem.css\nRedirect\n/syscmd.htm\n{\"errCode\":0}\nerrcode:5\nsuccess\npingHost.cmd\nUSG FLEX 100\nUSG FLEX 100w\nUSG FLEX 200\nUSR-G806\nUSR-G807\nUSR-G809\nUTT Internet Gateway Device,UTT 802.11 SoC Solution\nUW-301VP\nUW-303VPW\nUbiquiti Networks\nPolycom - Configuration Utility\nPortainer\nPortainer??\nPortainer面板\nPortal Page\nPower Management System\nPowerMTA monitoring\nPredor Personal Web\nPrihlásit se\nPrometheus Time Series Collection and Processing Server\nRouter Access\nRouter Management Utility\nRouter Web Manager\nRouter-??\nRouter-高恪\nRouter\nRouterOS router configuration page\nRt47 @ Petersburg - 471034,Siqura multi-codec VideoEncoder\nRt47 @ Rt347 MM31.8 - 402067,Siqura multi-codec VideoDecoder\nRttys\nBackup - Synology DiskStation\nBad Request\nBagisto Installer\nBbox - connexion\nBeastModeV3.4\nBeastModeV6\nBenvenuti : SCT2 Indirizzo 22 sulla LAN 1\nBienvenido | PRTG Network Monitor (SERVER)\nBinMade???????\nBioTime 8.5\nGLPI - ????\nGLPI - Autenticação\nGLPI - 登陆入口\nGM Blog\nGM System\nGM620\nGOCLOUD\nGONU002\nGOPON-1000R-ONU\nGPE550A\ndnsmasq_setup.sh\netc\nlib\nlua_plu\nmnt\noverlay\nproc\nrom\nroot\nsbin\nServer: JAWS/1.0 Aug 26 2015\nServer: JAWS/1.0 Mar 6 2017\nServer: JAWS/1.0 Sep 18 2018\nServer: JAWS/1.0 Sep 30 2016\nServer: JAWS/1.0Jan302016\nServer: JAWS/1.0Mar172016\nServer: JAWS/1.0May132013\nServer: JAWS/1.0Oct232015\nServer: JBoneOS-http\nServer: JFinal 4.9.17\n
    \n\n\nServer: Arcadyan httpd 1.0\nServer: Asterisk/1.8.9\nServer: Asterisk/13.13.1\nServer: Astra\nServer: AstraSM\nServer: Aterm(HT)/1.0.0\nServer: AutobahnPython/21.3.1\nServer: AvigilonGateway/1.0 Microsoft-HTTPAPI/2.0\nServer: AxelWebServer-1.0\nServer: B&R Web Server Ver. {2-250416-25}\nLIVE JPEG
    \nInternet Monitor (Microsoft Internet Explorer 8, 9, 10, 11)
    \nDownload 32 bits DVR Client (Windows 7, Windows 8, Windows 10)
    \nDownload 64 bits DVR Client (Windows 7, Windows 8, Windows 10)
    \nDownload 32/64 bits File Player (Windows 7, Windows 8, Windows 10)
    \n<\\?xml version=\"1.0\" encoding=\"utf-8\"?>\nLocation: /admin\n\nLocation: http://120.46.215.52:80/relogin.htm?_t=3541144909\nLocation: http://120.46.215.52:80/syscmd.htm\" Location: /ui/login\nServer: thttpd/2.19-MX Nov 6 2014\nServer: thttpd/2.19-MX Nov 15 2021\nServer: thttpd/2.19-MX Oct 10 2007\nServer: thttpd/2.19-MX Oct 19 2011\nServer: thttpd/2.19-MX Oct 20 2003\nServer: thttpd/2.19-MX Oct 29 2013\nServer: thttpd/2.19-MX Sep 1 2008\nServer: thttpd/2.19-MX Sep 9 2010\nServer: thttpd/2.19-MX Sep 9 2013\nServer: thttpd/2.19-MX Sep 10 2015\nCopyright (c) 2018 by Pulse Secure, LLC. All rights reserved\nAddress HWtype HWaddress Flags Mask Iface\n172.17.0.3 ether 01:82:ab:11:00:03 C docker0\ngateway ether 00:01:00:01:00:01 C eth0\ndnsflow01v.yc3.3 ether 00:01:00:01:00:01 C eth0\npamjump01v.yc3.36 ether 00:01:00:01:00:01 C eth0\n\nbin\nboot\ndev\nLite 3 - Algeciras (37.13.28.1)\nLivebox\nLiving Room 1_1460(HiMediaRender)\nLiving Room 1_1625,UPnP HiMultiScreen Device 1.0\nLobos, Argentina Condiciones Climáticas Actuales\nLocation: http://192.168.1.1/home_H1.asp\nLog in - Bitbucket\nLog In ‹ Persona 5 Bio — WordPress\nLog In - Atlassian - Confluence\nLog In - Confluence\nATX-IG8 - Ignition Gateway\nAXGATE UTM\nAXIS C1410\nAXIS M3004 - ACCC8E169710\nAXIS M3004 Network Camera\nAXIS Q3515 View\nAXIS\nAbogadoMX\nAcasa - Text Vechi\nAcceder ‹ Enigma — WordPress\nOP993 - LuCI\nOPS-DRD (199.72.57.76),AV Media Renderer Device\nORLINE - Login\nOSCam r11715\nOT-4040VW\nObject Not Found\nObject moved\nOdoo\nOffice Anywhere 2017? ????????\nOfficeTen Manage System<\nSYNO.Core.Desktop.SessionData\nAccount.Maxuser\nUser1.Username=root\nUser1.Password=123\ncmd.php\nFirmware.Version=1011-1005-1008-1002\nMACAddress=00:0E:53:01:02:03\nProduct.Type=DVR\nProduct.ID=308B\nProduct.ShortName=V_full_Indep,V_Multistream\nwatchTowr:::0:::rwoThctaw\nEmpty{name=\nDestination host\nwelcome.cgi?p=logo\nTips:you can update now\n0: '/tmp//juniper2023_08_25.php'},\n/2amy7WZKDFL9B8a3ET8qeKizzr9/\nPlatform Administrator\n\n\nServer: CherryPy/3.1.2 WSGI Server\nServer: CherryPy/3.2.2\nServer: CherryPy/3.2.5\nServer: CherryPy/4.0.0\nServer: CherryPy/8.6.0\nServer: Cimer\nServer: Cisco-CUCM11.5\nServer: Cisco-CcspCwmpTcpCR/1.0\nServer: Citrix Web PN Server\nServer: Clayster.Library.Internet/1.1\nServer: Web Server/2.1.0 PeerSec-MatrixSSL/3.1.3-OPEN\nServer: Web Server/2.1.0 PeerSec-MatrixSSL/3.9.5-OPEN\nServer: Web Switch\nServer: Web server\nServer: Web-Server\nServer: Web/0.02.07\nServer: WebBox-20\nServer: WebServer\nServer: WebServer(ipcamera)\nServer: WebServer-Webs/2.5.0\nZYNAS - Synology DiskStation\nZabbix Server: Zabbix\nZabbix docker: Zabbix\nZeroShell\nZetron Radio-over-IP Gateway - 00:0B:13:00:8D:F4\nZhongjun Design\nZhongjun Design\nZimbra Web Client Sign In\nZioncom TOTOLINK N300R,Zioncom TOTOLINK N300R\nZoho\nZS GIGILeather\nZS GIGILeather\nZTE Gateway - webGUI IX350\nZTE web server 1.0 ZTE corp 2015\nZXHN F450A\nZXHN F663NV3a\nZXHN F673AV9a\nZXHN H108N V2.5\nZXHN H118N\nZXHN H168N V3.1\nfastjson\n
    \n

    RouterOS WebFig Login

    \n\n

    RouterOS v6.34.3

    \n

    You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator.

    \n\n\n\n\n7db3eea5-9996-4032-a9cc-3afd06bd11fe\nPowered by Gibbon v23.0.01\n
    Openfire, Version: 3.6.0a
    \nIP.Board\n
    LoadMaster
    \n


    出厂IP：192.168.1.1
    用户名、密码：admin admin

    \n\n\n\n\n\n

    java.lang.Exception: y9pcHMuY

    \nSonicWall Universal Management Suite v9.3\n
    OK
    \n\n\nMODIFY\n\n\n

    WebFig Login:

    \n
    Password: \n
    \nServer: webserver/1.0\nServer: websocket-sharp/1.0\nServer: webswing.org\nServer: workerman\nServer: wts/1.2\nServer: xxxx\nServer: xxxxxxxx-xxxxx\nServer: yawcam/0.6.0\nServer: yealink embed httpd\nServer: yuntuc\nServer: lighttpd/1.4.28-devel-6584\nServer: lighttpd/1.4.28-devel-6814\nServer: lighttpd/1.4.28-devel-6862\nServer: lighttpd/1.4.28-devel-6965\nServer: lighttpd/1.4.28-devel-707\nServer: lighttpd/1.4.28-devel-7497\nServer: lighttpd/1.4.28-devel-8306\nServer: lighttpd/1.4.28-devel-9051\nServer: lighttpd/1.4.28-devel-9217\nServer: lighttpd/1.4.28-devel-remove_missing-9594-16-g9ee5248\nNSA320\nNSA320S\nNSA325 v2\nNSA325\nNTPL-XPON1GEFEVN\nNTPL-XPON1GFEVN\nNTPL-XPON2GEACV\nNUUO Network Video Recorder Login\nNVR Client\nNVR LOGIN\nNuCom 11N Wireless Router Login Screen\nOA????\nODANT\nODU\nOFBiz: Web Tools: Web Tools Main Page\nOGNL Console\nOH-736\nOLT Web Management Interface\nONLYOFFICE Docs™ Community Edition\nONT-4GE-2VW\niootzq9htsfd101000ocjdqqnj6k21nlc\nphpkniht\nnamelifyxor\nUsername : jdoe\nCurrent privilege level : 15\nCurrent Mode/s : P_PRIV P_CONF\n\n\nSSL VPN Service\nSuccess\nServer: RomPager/4.07\nServer: RomPager/4.07 UPnP/1.0\nServer: RomPager/4.37\nServer: RomPager/4.51 UPnP/1.0\nServer: Router\nServer: Router Webserver\nServer: Ruijie Server\nServer: Ruijie Servrer\nServer: Rumpus\nServer: SAP NetWeaver Application Server 7.45 / AS Java 7.40\nServer: WebServer/1.0\nServer: WebServer/1.0 UPnP/1.0\nServer: WebServer/1.0.0\nServer: WebServer/2.0\nServer: WebServer2\nServer: WebSocket++/0.7.0\nServer: WebSocket++/0.8.1\nServer: WebSockify Python/2.7.12\nServer: WebSockify Python/3.6.9\nServer: WebSockifyPython/2.7.5\nServer: lighttpd/1.4.55-devel-b6322c4\nServer: lighttpd/1.4.56\nServer: lighttpd/1.4.56-devel-lighttpd-1.4.55-341-gd2d5f2\nServer: lighttpd/1.4.57\nServer: lighttpd/1.4.58\nServer: lighttpd/1.4.58-devel-lighttpd-1.4.55-676-g324b2540\nServer: lighttpd/1.4.59\nServer: lighttpd/1.4.59-devel-df8d86a\nServer: lighttpd/1.4.59-devel-lighttpd-1.4.59-81-g8a0364a1\nServer: lighttpd/1.4.60\nsys\ntmp\nusr\nvar\nwww\n\n\n/wp-content/plugins/time-clock/\n/wp-content/plugins/time-clock-pro/\n
  • Printed by Atlassian Confluence 8.5.5
    • \nuid=0(admin) gid=0(admin)\nvar Name=\"admin\";\nvar loginNum=\"1\";//恢复出厂设置后loginNum==0\nvar Manufacturer=\"D-Link\";\nvar ModelName=\"DSL-2888A\";\nvar HardwareVersion=\"T1\";\nvar SoftwareVersio=\"EG_1.00b4\";\nZoneDirector,Ruckus Wireless ZoneDirector\nZoom Adsl Modem/Router\nZyWALL USG 20\nZyWALL USG 20W\nZyXEL NAS326\nZyXEL NSA310\nZyXEL NSA320\nZyXEL NSA325 v2\nZyXEL P-660HN-T1A\na19s12:8000/\nSonicWall Universal Management Suite v9.3\nSpiderFlow\nStatistics Report for HAProxy\nStatus page\nStruts2045\nSuccess!\nSunGuard\nSunny Central\nSunny Plains Foundation Home - Sunny Plains Foundation\nSunny WebBox\nexportDescriptor.properties\nWww-Authenticate: Digest realm=\"HuaweiHomeGateway\",nonce=\"eef112713ba3f6c99c5904eb1b0eede1\", qop=\"auth\", algorithm=\"MD5\"\nZXHN H108N V2.5\nCopyright © Grandstream Networks, Inc. 2014-2023. All Rights Reserved.\n\nGTEN Model 4 R2 Modem\nSet-Cookie: sesskey=22263a2bf; path=/; SESSID=da122263a2bd; sessionid=ff122263a2bf; webvpnLang=webvpnLang; webvpn=; webvpncontext=00000@SSLContext;\n/internal_forms_authentication/?targetId=7617d37d-d939-455a-b481-35181b7f10c8\nThe comparison expression does not consist of three elements: .ttf\n

    This will reveal the OWNCLOUD_ADMIN_USERNAME and OWNCLOUD_ADMIN_PASSWORD\nDS5000 Series Web Control Server\nDS918-I5 - Synology DiskStation\nDS918-I5 - Synology DiskStation\nDSL Router\nDSL-2640U\nDSL-2730B TBGA\nDSL-6740C\nDSL_2640NRU\nDSM mobile - DS3617\nDSM mobile - DiskStation\n\n\n \n \n \n \n \n \n \n \nServer: kangle/3.5.19\nServer: kangle/3.5.8.2\nServer: kngx/1.10.2\nServer: ksc/1223\nServer: kx-ns1000\nServer: lighttpd\nServer: lighttpd (RedHat)\nServer: lighttpd (SliTaz GNU/Linux)\nServer: lighttpd - Ice Cold Apps\nServer: lighttpd 1.4.53\nWeb Client Pro\nWeb Client for EDVS/EDVR\nWeb Client\nWeb Filter Block Override\nWeb Help Desk\nWeb Istemcisi\nWeb Maintenance Console\nWeb Management\nWeb Manager\nWeb Office\nDNP ePort - Cảng Điện Tử Cảng Đà Nẵng\nDR_Dom - Synology DiskStation\nDS-7104HGHI-E1 192.168.1.108,Digital Video Recorder\nDS1517 (DS1517+),Synology NAS\nDS218plus - Synology DiskStation\nDS218plus - Synology DiskStation\nDS218 - Synology DiskStation\nDS220plus - Synology NAS\nDS320\nDS3622 - Synology NAS\nServer: lighttpd/1.4.35-devel-4039M\nServer: lighttpd/1.4.35-devel-lighttpd-1.4.35\nServer: lighttpd/1.4.36\nServer: lighttpd/1.4.37\nServer: lighttpd/1.4.37-devel-599M\nServer: lighttpd/1.4.38\nServer: lighttpd/1.4.39\nServer: lighttpd/1.4.40\nServer: lighttpd/1.4.41\nServer: lighttpd/1.4.42\nServer: Boa/0.94.9\nServer: Boa/0.95.00\nServer: Boa/0.95.13\nServer: Boa/1.0.0\nServer: Boa/2.04.24\nServer: Boa/modern\nServer: Boas/0.99.1\nServer: Brovotech/2.0.0\nServer: Byte-nginx\nServer: CDMSSERVER\nServer: NVR Web server\nServer: Neobox Web Server\nServer: Net-OS 5.xx UPnP/1.0\nServer: NetBox Version 2.8 Build 4128\nServer: NetData Embedded HTTP Server 20200416-1574-g011c015a6\nServer: NetDataEmbeddedHTTPServer20200416-1574-g011c015a6\nServer: NetdataEmbeddedHTTPServerv1.32.1-37-nightly\nServer: Netwave IP Camera\nServer: Network_Module/1.0 (RX-V581)\nServer: Nexus/3.0.0-03 (OSS)\nServer: lighttpd/1.4.32-devel-2710\nServer: lighttpd/1.4.32-devel-33567M\nServer: lighttpd/1.4.32-devel-3635\nServer: lighttpd/1.4.32-devel-3781\nServer: lighttpd/1.4.33\nServer: lighttpd/1.4.33-devel-2673\nServer: lighttpd/1.4.33-devel-455M\nServer: lighttpd/1.4.34\nServer: lighttpd/1.4.34-devel-11909M\nServer: lighttpd/1.4.35\nSUNSHINE - LuCI\nSUPERMAX - Bem-Vindo\nSWeb\nSY-GPON-1000R-DONT\nSY-GPON-4020-WDONT\nSaber???????\nSaber企业级开发平台\nSagemcom ADSL Router,(null)\nSanitaryLandslide is a Tor Exit Router - or not.\nSanoil Bayi Portal\nH.264 Network Camera\nH0m3l4b1t: YES\nH108N,Broadband System\nH168N\nH2-2\nH268A\nH288A\nH3-2s\nH3C SecPath F100-A-G5\nH3C Magic R200 ?????\nISOFH - PK ĐK YTCC\nISX1104-P\nISX1208-P\nISX1208\nISX1216\nISX1416\nISX1432\nIVSWeb 2.0 - Benvenuto\nIVSWeb 2.0 - Welcome\nIX380,ZTE Fixed Wireless Terminal\n\n\n\n

    8.5.5 (Build:20200530.307-TEMP)
    \nVersion 2023.11.3 (build 147512)\n

    Logged in as admin

    \n\n\n
    \n The zip file did not contain an entry exportDescriptor.properties\nServer: lighttpd/1.4.23-devel-Unversioned directory\nServer: lighttpd/1.4.24\nServer: lighttpd/1.4.24-devel-107726\nServer: lighttpd/1.4.24-devel-112290\nServer: lighttpd/1.4.24-devel-112292\nServer: lighttpd/1.4.24-devel-97458M\nServer: lighttpd/1.4.24-devel-97660\nServer: lighttpd/1.4.25\nServer: lighttpd/1.4.25-devel-f93da54\nServer: lighttpd/1.4.25-devel-v2.2.24\nXFINITY\nXHKI\nXN020-G3\nXPE-3200-IP-FACE\nXPON ONU\nXPON-1G3F-5G\nXPON-ONU\nXPON-OPT-1001GE\nXVR LOGIN\nXVR\nServer: XCDN\nServer: Xavante 2.2.0 embeded\nServer: Xfinity Broadband Router Server\nServer: Xovis PC Series\nServer: XovisPCSeries\nServer: Yamaha-RT\nServer: ZK Web Server\nServer: ZLMediaKit(git hash:1292ec6,branch:master,build time:Sep 29 2021 18:28:24)\nServer: ZLMediaKit(git hash:b4207240,branch:master,build time:Nov 2 2021 11:36:02)\nServer: ZLMediaKit-5.0(build in Apr 8 2021 03:17:35)\nVersion-v9\nVertex\nVideoServer\nVigor 2960\nVigor 2960\nVigor 300B\nVigor ????\nVigor Login Page\nVigor 登录页面\nVilnius Mada (build 21061) - Info\nT1\nT3,T3\nTASK-SERVER-NAS - Synology DiskStation\nTC-Group - LuCI\nTCK · Logger\nTCK · Login\nTD-W8970\nTD-W9970(TR)\nTD-W9970\nTDVRL16 10.1.10.249,Digital Video Recorder\nSonicWall Universal Management Suite v9.3\n
    OK
    \n\n\nMODIFY\n\n

    java.lang.Exception: y9pcHMuY

    \nRESULT=0\nThis a vulnerability!\npixmaps/debian-logo.png\nSuccessfulUpload\nPayload Executed\n/OAapp/WebObjects/OAapp.woa\nSystem.ArgumentException\nHello World!\nMiCollab End User Portal\nARN02304U8\nServer: LANCOM\nServer: LHS\nServer: LINUX/2.4 UPnP/1.0 BRCM400/1.0\nServer: LIVE555 Streaming Media v2020.04.24\nServer: LOS HTTP Server 1.0\nServer: LOVE\nServer: LSWebServer/1.0.0\nServer: LTE Router\nServer: LTE Router Webs\nServer: Lighttpd\nServer: MS-MFC-321-1/1.1\nServer: MS-MFC-HttpSvr/1.0\nServer: MS-SDK-HttpServer/1.0\nServer: MapbarServer\nServer: Mathopd/1.5p6\nServer: Mbedthis-AppWeb/2.2.2\nServer: Mbedthis-Appweb/0.0.0\nServer: Mbedthis-Appweb/2.4.2\nServer: Medusa/1.12\nServer: Mhz server\nServer: iPlanet-Web-Proxy-Server/3.6\nServer: iPlanet-Web-Proxy-Server/3.6-SP5\nServer: iSpy\nServer: iVMS-Web\nServer: iis8.0\nServer: infosec/1.0.0\nServer: instafogging/1.21.4.1\nServer: ioLogik Web Server/1.0\nServer: istio-envoy\nServer: jjhttpd v0.1.0\nVoIPmonitor\nVodafone ADSL Router\nVue Admin Template\nVue Element Admin\nVuln!! patch it Now!\nW.T.Chen?????\nWAP3205v2,WAP3205v2\nWBR-6005,150M N wireless Router\nWCM-COM Webserver\nWDisk WebInterface\nBR AWARE\nBRANDICA\nBRCM-DMS:10,Broadcom Digital Media Server Ver 1.0\nBUFFALO Layer2 Gigabit Smart Lite Switch\nBUFFALO SmartWeb Switch\nBUFFALO\nBXY920 - Synology NAS\nBYTEVALUE ???????\nBYTEVALUE 智能流控路由器\nBackup - Synology DiskStation\nCopyright (c) 2015-2020 by Cisco Systems, Inc.\nAll rights reserved.\nSSL VPN Service\nwsConvertPptResponse\n\n\n\n\n \n\n \n \n\n \n
    \n OPNsense (c) 2014-2024 Deciso B.V.\n
    \n\n \n\n \n \n","version":"1.1","content_length":2784},"tag":[{"name":"php","description":"PHP is a general-purpose scripting language used for web development.","php":{"version":""},"cpe":["cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"],"fullname":"PHP","category":["Programming languages"]},{"name":"jquery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","cpe":["cpe:2.3:a:jquery:jquery:3.5.1:*:*:*:*:*:*:*"],"fullname":"jQuery","category":["JavaScript libraries"],"jquery":{"version":"3.5.1"}},{"opnsense":{"version":""},"name":"opnsense","fullname":"OPNsense security plarform","category":["Security"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"ip":"181.225.233.229","isp":"Empresa de Telecomunicaciones de Cuba, S.A.","certificate":{"issuer_dn":"O=CA, OU=Zimbra Collaboration Server, CN=mail-md.red.geiq.cu","fingerprint_md5":"3e888a2c13872dda422648e5fcae1451","signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"GvcPrXS7FcMSk8j5trhfW+3SYOWXXR8ZUj6B5rna6DnVJFTyBqpLyMAGVm+bbHu/OHNFGDMwwc6LEH4omdFVl7UbUNQIrQr16Kx+o6j9GX7CjTD+48i/OKZ5UpuCoT0riO9AU1EH0TI+nhnoBcjJ2+SwX3G3hCajXW4YWz4wF/sG5ZlV+8Fcy0VUPhSJx/K186X6LfC39NQVCY4Q4uA+lBuS3iCCiJ0gULX7/wX5vcRZz9XYvoq+JSaC9gnFQuA72gXcfGQed3dsywRQK+zUEKa9Uw14/g/s6vHwNfzmguHlxkswwoBBmRsMR1bf3Z5SkK0EDV9uqzBhkA9NDCgzng==","self_signed":false},"src":"https://181.225.233.229:8333/","redacted":false,"subject":{"common_name":["mail-md.red.geiq.cu"],"organizational_unit":["Zimbra Collaboration Server"]},"serial_number":"100932261477","version":3,"issuer":{"organization":["CA"],"common_name":["mail-md.red.geiq.cu"],"organizational_unit":["Zimbra Collaboration Server"]},"tbs_noct_fingerprint":"551a6e5ddb67968d5f034c661eff84d6376244ba9cf60a8138888455fd5949c8","fingerprint_sha256":"f8df4b21e464969cbe83cefba24bf5aa19d3c5f1fa0cc6eb7cf1c1d2ac56e407","extensions":{"key_usage":{"digital_signature":true,"content_commitment":true,"key_encipherment":true,"value":7},"subject_alt_name":{"dns_names":["mail-md.red.geiq.cu"]},"basic_constraints":{"is_ca":false}},"tbs_fingerprint":"551a6e5ddb67968d5f034c661eff84d6376244ba9cf60a8138888455fd5949c8","names":["mail-md.red.geiq.cu"],"subject_dn":"OU=Zimbra Collaboration Server, CN=mail-md.red.geiq.cu","fingerprint_sha1":"a947c899b70aa33682c9bef4310ef4a9e7262047","spki_subject_fingerprint":"090d3b3c02edffbe4502ecb393a954566bd9d2746ece9049b7457717e916c1ce","validity":{"start":"2026-05-29T19:08:59Z","length":315360000,"end":"2036-05-26T19:08:59Z"},"validation_level":"unknown"},"uri":"https://181.225.233.229:8333/","host_type":"ip","target":{"ip":"181.225.233.229","type":"ip"},"prot7":"http","geo":{"continent":"North America","country":"CU","city":"Havana","tz":"America/Havana","accuracy":10,"location":{"lon":-82.395,"lat":23.1492},"registered_country":"CU","subdivisions":["Havana"]},"path":"/","prot4":"tcp","protocol":"https","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; ...","published":"2026-07-21T22:19:09.667","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-62574","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, ...","published":"2026-07-21T22:17:12.190","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-47063","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.4","integrity_impact":"HIGH","description":"Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple ...","published":"2026-07-21T22:17:11.600","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-47058","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols ...","published":"2026-07-21T22:17:11.483","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-47057","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, ...","published":"2026-04-21T21:16:32.643","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34282","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, ...","published":"2026-04-21T21:16:28.470","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-22016","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/George0Papasotiriou/CVE-2026-22016-IPFS-CID-Spoofing-via-Multihash-Length-Extension"],"match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, ...","published":"2026-01-20T22:15:57.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-21945","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.4","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, ...","published":"2026-01-20T22:15:55.793","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2026-21932","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle ...","published":"2025-10-21T20:20:47.177","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-53066","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.1","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; ...","published":"2025-07-15T20:15:47.013","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-50106","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","published":"2023-10-10T14:15:10.883","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-44487","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/Appsynergy-io/CVE-2023-44487","https://github.com/ByteHackr/CVE-2023-44487","https://github.com/pabloec20/rapidreset","https://github.com/secengjeff/rapidresetclient","https://github.com/studiogangster/CVE-2023-44487","https://github.com/ReToCode/golang-CVE-2023-44487","https://github.com/ndrscodes/http2-rst-stream-attacker","https://github.com/nxenon/cve-2023-44487","https://github.com/sigridou/CVE-2023-44487-","https://github.com/TYuan0816/cve-2023-44487","https://github.com/sn130hk/CVE-2023-44487","https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC","https://github.com/aulauniversal/CVE-2023-44487","https://github.com/BMG-Black-Magic/CVE-2023-44487","https://github.com/moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack","https://github.com/zanks08/cve-2023-44487-demo","https://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Reset","https://github.com/tpirate/cve-2023-44487-POC","https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos","https://github.com/sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-","https://github.com/TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab","https://github.com/Hirokiii/CVE-2023-44487","https://github.com/madhantr0/http2-security-lab","https://github.com/tahaXafous/CVE-2023-44487-dos","https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit"],"match_product":"Nginx"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","has_exploit":true,"description":"When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets ...","published":"2025-02-05T18:15:33.347","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-23419","match_type":"product","confidentiality_impact":"LOW","exploit_links":["https://github.com/harley-ghostie/safe-check-CVE-2025-23419","https://github.com/xitexploiter96-dot/CVE-2025-23419"],"match_product":"Nginx"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"NONE","description":"Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Zimbra. User interaction is required to exploit this vulnerability ...","published":"2024-11-22T21:15:23.923","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2024-9665","match_type":"product","confidentiality_impact":"HIGH","match_product":"Zimbra"}],"@timestamp":"2026-08-19T09:16:56.643Z","whois":{"related_nets":[],"net":{"country":"CU","address":"km 1/2 carretera a Luis Lazo, 1,\n10400 - Pinar del Rio -","created":"20150622","start_ip":"181.225.224.0","description":"Apcola Pinar","range":"181.225.224.0 - 181.225.224.7","handle":"DRF13","cidr":["181.225.224.0/29"],"net_size":7,"end_ip":"181.225.224.7","updated":"20170516","contacts":{"emails":["daniel.ramos@etecsa.cu","abuse@etecsa.cu"],"persons":["Daniel Ramos Fernndez","Armando Tito"]}},"asn":{"number":["27725"],"registry":"lacnic","country":"CU","name":"AS27725 - Empresa de Telecomunicaciones de Cuba","cidr":"181.225.224.0/19","updated":"2013-04-15"}},"port":8333,"host":"181.225.233.229","http":{"headers":{"date":["Wed, 19 Aug 2026 09:15:21 GMT"],"server":["nginx"],"expires":["-1"],"content_type":["text/html;charset=utf-8"],"set_cookie":["ZM_TEST=true;Secure","ZM_LOGIN_CSRF=256ff713-fea7-4a34-9a9a-91df26bb652d;Secure;HttpOnly"],"vary":["User-Agent","Accept-Encoding"],"cache_control":["no-store, no-cache, must-revalidate, max-age=0"],"connection":["keep-alive"],"pragma":["no-cache"],"x_ua_compatible":["IE=edge"],"content_language":["en-US"],"x_frame_options":["SAMEORIGIN"]},"transfer_encoding":["chunked"],"status_code":200,"body_sha256":"322e49e2ac709d967732d73d857a020fe9b0d83f9622d0a9f49831c38c117d5d","meta":["http-equiv=\"Content-Type\" content=\"text/html;charset=utf-8\"","name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"","name=\"description\" content=\"Zimbra provides open source server and client software for messaging and collaboration. To find out more visit https://www.zimbra.com.\"","name=\"apple-mobile-web-app-capable\" content=\"yes\" ","name=\"apple-mobile-web-app-status-bar-style\" content=\"black\" "],"description":"Zimbra provides open source server and client software for messaging and collaboration. To find out more visit https://www.zimbra.com.","title":"Zimbra Web Client Sign In","status_line":"200 OK","body":"\n\n\n\n\n\t\n\tZimbra Web Client Sign In\n\t\n\t\n\t\n\t\n\t\n\t\n\n\n\n\n\n\t
    \n\t\t
    \n\t\t\t
    \n\t\t\t\t

    Zimbra\n\t\t\t\t\t\n\t\t\t\t

    \n\t\t\t\t
    Web Client
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\n \n \n \n \n \n \n \n \n \n \n \n \n\t\t\t\n\t\t\t\t\n \n \n \n \n \n \n
     \n \n \n \n
    \n \n \n
    \n \n \n

    Client Types

    \tAdvanced offers the full set of Web collaboration features. This Web Client works best with newer browsers and faster Internet connections.

    Standard is recommended when Internet connections are slow, when using older browsers, or for easier accessibility.

    Mobile is recommended for mobile devices.

    To set Default to be your preferred client type, change the sign in options in your Preferences, General tab after you sign in.
    \n
    Note that your web browser or display does not fully support the Advanced version. We strongly recommend that you use the Standard client.
    \n
    \n
    \n
    \n\t\t\t
    \n\t\t\t
    \n\t\t
    \n\n\t\t
    \n\t\t\t
    Zimbra :: the leader in open source messaging and collaboration :: Blog - Wiki - Forums
    \n\t\t\t
    \n\t\t\tCopyright © 2005-2021 Synacor, Inc. All rights reserved. \"Zimbra\" is a registered trademark of Synacor, Inc.
    \n\t\t
    \n\t\t
    \n\t
    \n\n\n\n","version":"1.1","content_length":-1},"tag":[{"java":{"version":""},"name":"java","cpe":["cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*"],"description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","fullname":"Java","category":["Programming languages"]},{"nginx":{"version":""},"name":"nginx","cpe":["cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"],"description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","fullname":"Nginx","category":["Web servers","Reverse proxies"]},{"name":"zimbra","cpe":["cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*"],"zimbra":{"version":""},"fullname":"Zimbra","category":["Webmail"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"isp":"Telefonia Publica y Privada S.A.","ip":"181.225.12.91","certificate":{"issuer_dn":"C=US, O=Let's Encrypt, CN=YE1","fingerprint_md5":"f41d5bf487c9d2ce88cb0b571d15a53c","chain":[{"issuer_dn":"C=US, O=ISRG, CN=Root YE","fingerprint_md5":"56c80ed1f5dc74dc0979607f6359ec0b","signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGUCMQDgjUEahFT/h3DRakqiPZpLvPgfZwkt6K2EOMmh1nvEzl83eMLYcod4GCl3b0J1Nn0CMBNYmEQJb4CEG5WoOe7aRn/LVKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA==","self_signed":false},"redacted":false,"subject":{"country":["US"],"organization":["Let's Encrypt"],"common_name":["YE1"]},"serial_number":"124767990368497485228327191697811835646","version":3,"issuer":{"country":["US"],"organization":["ISRG"],"common_name":["Root YE"]},"tbs_noct_fingerprint":"da927a1e4ae18a673c4940abe1fc67d5bcf20340347b070ca5999f5b7fd0ad48","fingerprint_sha256":"a2372d06431e9716365eeed47ec020351497d182fcc038e457e58168a03cac07","tbs_fingerprint":"da927a1e4ae18a673c4940abe1fc67d5bcf20340347b070ca5999f5b7fd0ad48","extensions":{"crl_distribution_points":["http://ye.c.lencr.org/"],"subject_key_id":"bb20ca470bfed7e59cf98f092aa38c3745b1bcd8","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"digital_signature":true,"certificate_sign":true,"crl_sign":true,"value":97},"authority_key_id":"a3c8265a8ea14cd03563fc9b23c83aae56f34f56","authority_info_access":{"issuer_urls":["http://ye.i.lencr.org/"]},"basic_constraints":{"max_path_len":0,"is_ca":true},"extended_key_usage":{"server_auth":true}},"subject_dn":"C=US, O=Let's Encrypt, CN=YE1","fingerprint_sha1":"d09370a9864982a5047da46373540256d08a3c81","spki_subject_fingerprint":"46b2d808bc20245f2b44fb229c92d1f5147ca4317b42a687b7c4767b035f1294","validity":{"length":94694399,"start":"2025-09-03T00:00:00Z","end":"2028-09-02T23:59:59Z"},"validation_level":"DV"},{"issuer_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X2","fingerprint_md5":"cddedecf5a284a1b68b3b6bd50052659","signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGYCMQDFNfVgrZsVTQ/FBwWUaJmuPWe4z7OuA5mtHk7tTgoVWwf9iexld572CgMeeLpNRvUCMQDtJoi1SbvDyzYl115IhP4LCtwk0Uxf2nqOGzF+NmcONHLEVOgAtuoUltfyFmmrOnY=","self_signed":false},"redacted":false,"subject":{"country":["US"],"organization":["ISRG"],"common_name":["Root YE"]},"serial_number":"179619193732476545641173103431506703674","version":3,"issuer":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X2"]},"tbs_noct_fingerprint":"369d1cf858e309c02aa2824c3763e12c05975e03291bff2bb462567bcbe93f21","fingerprint_sha256":"0fc0901cca2bae9e9fdbb02d50d02f1094f7b36672086991b9e897626dc485f0","tbs_fingerprint":"369d1cf858e309c02aa2824c3763e12c05975e03291bff2bb462567bcbe93f21","extensions":{"crl_distribution_points":["http://x2.c.lencr.org/"],"subject_key_id":"a3c8265a8ea14cd03563fc9b23c83aae56f34f56","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"certificate_sign":true,"crl_sign":true,"value":96},"authority_key_id":"7c4296aede4b483bfa92f89e8ccf6d8ba9723795","authority_info_access":{"issuer_urls":["http://x2.i.lencr.org/"]},"basic_constraints":{"is_ca":true},"extended_key_usage":{"server_auth":true}},"subject_dn":"C=US, O=ISRG, CN=Root YE","fingerprint_sha1":"f37620fc4b1cddd2a3d74b1d5e8db42e244ca006","spki_subject_fingerprint":"06d2b2f7d6dd24ec3fb81bf4825876669dde75f6e14cc0d00904ffeb4f10985d","validity":{"length":199151999,"start":"2026-05-13T00:00:00Z","end":"2032-09-02T23:59:59Z"},"validation_level":"DV"},{"issuer_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X1","fingerprint_md5":"5292fa0079c5afae289c2d2141236e04","signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"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","self_signed":false},"redacted":false,"subject":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X2"]},"serial_number":"144299725964134815114551462777128548813","version":3,"issuer":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X1"]},"tbs_noct_fingerprint":"8c5033973ffe4ff1ef0aa92984fc93281ba7a9278ef8bf641226b898d10d4e74","fingerprint_sha256":"ee5f7abd6981bb0255632cd8f49283451b4b18844d12040b44ee00f07b8fe2c6","tbs_fingerprint":"8c5033973ffe4ff1ef0aa92984fc93281ba7a9278ef8bf641226b898d10d4e74","extensions":{"crl_distribution_points":["http://x1.c.lencr.org/"],"subject_key_id":"7c4296aede4b483bfa92f89e8ccf6d8ba9723795","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"certificate_sign":true,"crl_sign":true,"value":96},"authority_key_id":"79b459e67bb6e5e40173800888c81a58f6e99b6e","authority_info_access":{"issuer_urls":["http://x1.i.lencr.org/"]},"basic_constraints":{"is_ca":true},"extended_key_usage":{"client_auth":true,"server_auth":true}},"subject_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X2","fingerprint_sha1":"3c34e356c7fc17f5acf04824bc587c6c623951a2","spki_subject_fingerprint":"2223f064e46b9faf6802d8d75d2d2503c538a19c20c42c0910cef935dac1ac47","validity":{"length":199151999,"start":"2026-05-13T00:00:00Z","end":"2032-09-02T23:59:59Z"},"validation_level":"DV"}],"src":"https://181.225.12.91:8333/","signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGUCMQCwnSiCcj/ZPcSo+ZIyM0/TfP1ZxMZCZvFGTGIM80zeT8AyUvmxV+PARZ/sgjnc4fUCMAwPKOVWvFSknNt4EdL1Q/kCfJumSmQP2MeM/XEK4JE1oCCNQJENBpSdEk1fhJ+Wqg==","self_signed":false},"redacted":false,"subject":{"common_name":["autogestion.xg.ar"]},"serial_number":"451796705520080720711172035178649071729447","version":3,"issuer":{"country":["US"],"organization":["Let's Encrypt"],"common_name":["YE1"]},"tbs_noct_fingerprint":"0ded4b3c47adeff246a14f4ffcde2e74bad042fe6ad37e3fbc4890e26c76075b","fingerprint_sha256":"818d715d104de688a3d90d98374e31688c92d7ac5aa13219a1b486d47753d05d","tbs_fingerprint":"eacacee4828e7ebecce2acad08515ad8e2181e84c41e882fcc8eb6fa06c36429","extensions":{"crl_distribution_points":["http://ye1.c.lencr.org/40.crl"],"subject_key_id":"7841aa9e6ed0d042d0d623bc178c896119ff827f","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"digital_signature":true,"value":1},"authority_key_id":"bb20ca470bfed7e59cf98f092aa38c3745b1bcd8","subject_alt_name":{"dns_names":["autogestion.xg.ar"]},"signed_certificate_timestamps":[{"log_id":"2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQ=","signature":"BAMARzBFAiB77YV6pUadiTcSfWgkJDx34ZxglU0d/7BpK9VYaiz3iAIhAKrw+OT7q4swj76ymaligOm5Tlwk7M9KJkPNRwgMq7m+","version":0,"timestamp":1784676493},{"log_id":"JuNkblhpISO8ND9HJDWbN5LNJFqI2BXTkzP9mRirRyM=","extensions":"AAAFACvV1Fk=","signature":"BAMARzBFAiEAo777N9VJbSMkGuBF2BVb3JShm9BuemlXDmGxdcGTzAoCIC6Nc/oUHrVS/e3lF3/wI1dlZ/KQF6UjMLr3dsm2y+YH","version":0,"timestamp":1784676493}],"authority_info_access":{"issuer_urls":["http://ye1.i.lencr.org/"]},"basic_constraints":{"is_ca":false},"extended_key_usage":{"server_auth":true}},"subject_dn":"CN=autogestion.xg.ar","names":["autogestion.xg.ar"],"fingerprint_sha1":"d80a0b192750f664f316f22a8a41e71d7c3bd860","spki_subject_fingerprint":"c4004e1eb89d27af96e00799aea754d22c567f2b0056cca9d3dd02f73866830a","validity":{"length":7775999,"start":"2026-07-21T22:29:43Z","end":"2026-10-19T22:29:42Z"},"validation_level":"DV"},"uri":"https://181.225.12.91:8333/","host_type":"ip","target":{"ip":"181.225.12.91","type":"ip"},"prot7":"http","geo":{"continent":"South America","country":"AR","city":"Buenos Aires","tz":"America/Argentina/Buenos_Aires","accuracy":20,"location":{"lon":-59.9964,"lat":-36.0},"postal":"1657","registered_country":"AR","subdivisions":["Buenos Aires"]},"path":"/","prot4":"tcp","protocol":"https","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an ...","published":"2026-05-28T19:16:42.073","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-47333","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lead to a use-after-free (UAF) and, theoretically, arbitrary code execution.","published":"2026-05-28T19:16:41.757","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-47331","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","has_exploit":true,"description":"In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place ...","published":"2026-04-22T09:16:21.270","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-31431","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["http://www.openwall.com/lists/oss-security/2026/04/29/23","http://www.openwall.com/lists/oss-security/2026/04/29/26","http://www.openwall.com/lists/oss-security/2026/04/30/18","http://www.openwall.com/lists/oss-security/2026/04/30/5","https://copy.fail","https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170","https://github.com/theori-io/copy-fail-CVE-2026-31431","https://xint.io/blog/copy-fail-linux-distributions#the-fix-6","https://github.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc","https://github.com/tgies/copy-fail-c","https://github.com/ZephrFish/CopyFail-CVE-2026-31431","https://github.com/insomnisec/Detections-CVE-2026-31431","https://github.com/ryan2929/CVE-2026-31431","https://github.com/st4rburn/RootRemover","https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH","https://github.com/JuanBindez/CVE-2026-31431","https://github.com/selectel/mks-copy-fail-mitigation","https://github.com/deckhouse/d8-copy-fail-mitigation","https://github.com/HulnotHutu/CVE-2026-31431","https://github.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT","https://github.com/bootsareme/copyfail-deconstructed","https://github.com/monobrau/copyfailscan","https://github.com/suominen/CVE-2026-31431","https://github.com/sandraschi/copy-fail-mcp","https://github.com/juliosuas/copyfail-guard","https://github.com/samanzamani/copy-fail-checker","https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe","https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284","https://github.com/Liverwortenuresis371/copyfail-rs","https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail","https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag","https://github.com/KaraZajac/DIRTYFAIL","https://github.com/krisiasty/vcheck","https://github.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe","https://github.com/Helios973/CVE-2026-31431_exp.c","https://github.com/vorkampfer/copyfail2_electric_boogaloo_fix","https://github.com/Lutfifakee-Project/CVE-2026-31431","https://github.com/mauricioportela/CVE-2026-31431-Analysis","https://github.com/gbonacini/CVE-2026-31431","https://github.com/sh4den/CVE-2026-31431-copyfail-aarch64","https://github.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab","https://github.com/SilverRuler/copy-fail-CVE-2026-31431","https://github.com/Sebastian294/cve-2026-31431","https://github.com/0xFuffM3/CVE-2026-31431-CopyFail","https://github.com/dotPY-hax/CopyFail","https://github.com/zKaaanon/ProyectoFinalSO","https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit","https://github.com/Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention","https://github.com/Pithase/asm-copyfail","https://github.com/4xura/CVE-2026-31431-Copy-Fail","https://github.com/royayub/CVE-2026-31431","https://github.com/Yakovyakov/cve-2026-31431-mitigation","https://github.com/cj667113/OCI-Ansible-Fix-CVE-2026-31431","https://github.com/GubiczaP/cve-2026-31431-checker","https://github.com/sgkdev/ptrace_may_dream","https://github.com/yangh-beep/CVE-2026-31431-C","https://github.com/JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC","https://github.com/4n4s4zi/copyfail-alpine","https://github.com/1m1ssher/copy-fail-python","https://github.com/ridhinva/linux-kernel-algif-aead-checker","https://github.com/Iamliuxiaozhen/copy_fail","https://github.com/songzzzz/CVE-2026-31431","https://github.com/vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431","https://github.com/nonameuserosint-hue/Copyfail-sh","https://github.com/tematemaru/CVE-2026-31431-simple-test","https://github.com/1neptune/CopyFail","https://github.com/zs1n/copy-fail-CVE-2026-31431","https://github.com/t1ckprivate/CVE-2026-31431-Copy-Fail","https://github.com/kinryulabs/rootpacket-cve-2026-31431","https://github.com/SugiB3o/CVE-2026-31431","https://github.com/TeamN4C/SG-2026-0013","https://github.com/TrevoCastles/CVE-2026-31431-copy-fail","https://github.com/dev1681/CVE-2026-31431","https://github.com/joaocalciolari07/copyfail-guard"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.8","integrity_impact":"HIGH","has_exploit":true,"description":"Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap\"s private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, ...","published":"2026-03-17T14:16:17.410","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-3888","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/DanielTangnes/CVE-2026-3888"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","has_exploit":true,"description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","published":"2025-06-30T21:15:30.257","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-32463","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/","https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot","https://github.com/pr0v3rbs/CVE-2025-32463_chwoot","https://github.com/4f-kira/CVE-2025-32463","https://github.com/K1tt3h/CVE-2025-32463-POC","https://github.com/IC3-512/linux-root-kit","https://github.com/7r00t/cve-2025-32463-lab","https://github.com/SysMancer/CVE-2025-32463","https://github.com/kh4sh3i/CVE-2025-32463","https://github.com/neko205-mx/CVE-2025-32463_Exploit","https://github.com/pevinkumar10/CVE-2025-32463","https://github.com/zhaduchanhzz/CVE-2025-32463_POC","https://github.com/robbert1978/CVE-2025-32463_POC","https://github.com/Mikivirus0/sudoinjection","https://github.com/san8383/CVE-2025-32463","https://github.com/0xAkarii/CVE-2025-32463","https://github.com/CIA911/sudo_patch_CVE-2025-32463","https://github.com/mirchr/CVE-2025-32463-sudo-chwoot","https://github.com/ill-deed/CVE-2025-32463_illdeed","https://github.com/zinzloun/CVE-2025-32463","https://github.com/0p5cur/CVE-2025-32463-POC","https://github.com/gmh5225/Blackash-CVE-2025-32463","https://github.com/FreeDurok/CVE-2025-32463-PoC","https://github.com/Chocapikk/CVE-2025-32463-lab","https://github.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT","https://github.com/SpongeBob-369/cve-2025-32463","https://github.com/lowercasenumbers/CVE-2025-32463_sudo_chroot","https://github.com/abrewer251/CVE-2025-32463_Sudo_PoC","https://github.com/morgenm/sudo-chroot-CVE-2025-32463","https://github.com/MohamedKarrab/CVE-2025-32463","https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC","https://github.com/Rajneeshkarya/CVE-2025-32463","https://github.com/MGunturG/CVE-2025-32463","https://github.com/Maalfer/Sudo-CVE-2021-3156","https://github.com/daryllundy/CVE-2025-32463","https://github.com/AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462","https://github.com/ChetanKomal/sudo_exploit","https://github.com/KaiHT-Ladiant/CVE-2025-32463","https://github.com/y4ney/CVE-2025-32463-lab","https://github.com/aldoClau98/CVE-2025-32463","https://github.com/painoob/CVE-2025-32463","https://github.com/1xPwn/CVE-2025-32463","https://github.com/Yuy0ung/CVE-2025-32463_chwoot","https://github.com/blackcat4347/CVE-2025-32463_PoC","https://github.com/ashardev002/CVE-2025-32463_chwoot","https://github.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape","https://github.com/AC8999/CVE-2025-32463","https://github.com/secvulnhub/CVE-2025-32463-EXPLOIT","https://github.com/dr4xp/sudo-chroot","https://github.com/NewComrade12211/CVE-2025-32463","https://github.com/Ghstxz/CVE-2025-32463","https://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation","https://github.com/justjoeyking/CVE-2025-32463","https://github.com/Mr-Alperen/CVE-2025-32463","https://github.com/SpycioKon/CVE-2025-32463","https://github.com/vpr-labs/CVE-2025-32463","https://github.com/danilo1992-sys/CVE-2025-32463","https://github.com/0xBlackash/CVE-2025-32463","https://github.com/Fomovet/cve-2025-32463","https://github.com/0xdak/CVE-2025-32463_exploit"],"match_product":"Ubuntu"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Ubuntu\"s configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.","published":"2025-01-31T02:15:28.440","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-1736","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.1","integrity_impact":"HIGH","has_exploit":true,"description":"A security regression (CVE-2006-5051) was discovered in OpenSSH\"s server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to ...","published":"2024-07-01T13:15:06.467","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-6387","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://santandersecurityresearch.github.io/blog/sshing_the_masses.html","https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt","http://www.openwall.com/lists/oss-security/2024/07/03/11","http://www.openwall.com/lists/oss-security/2024/07/04/2","http://www.openwall.com/lists/oss-security/2024/07/08/2","http://www.openwall.com/lists/oss-security/2024/07/09/5","http://www.openwall.com/lists/oss-security/2024/07/10/1","https://santandersecurityresearch.github.io/blog/sshing_the_masses.html","https://www.exploit-db.com/exploits/52269","https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt","https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387","https://github.com/7etsuo/cve-2024-6387-poc","https://github.com/zgzhang/cve-2024-6387-poc","https://github.com/acrono/cve-2024-6387-poc","https://github.com/lflare/cve-2024-6387-poc","https://github.com/getdrive/CVE-2024-6387-PoC","https://github.com/FerasAlrimali/CVE-2024-6387-POC","https://github.com/passwa11/cve-2024-6387-poc","https://github.com/jack0we/CVE-2024-6387","https://github.com/xaitax/CVE-2024-6387_Check","https://github.com/bigb0x/CVE-2024-6387","https://github.com/wiggels/regresshion-check","https://github.com/P4x1s/CVE-2024-6387","https://github.com/betancour/OpenSSH-Vulnerability-test","https://github.com/muyuanlove/CVE-2024-6387fixshell","https://github.com/TAM-K592/CVE-2024-6387","https://github.com/teamos-hub/regreSSHion","https://github.com/ahlfors/CVE-2024-6387","https://github.com/Mufti22/CVE-2024-6387-checkher","https://github.com/thegenetic/CVE-2024-6387-exploit","https://github.com/R4Tw1z/CVE-2024-6387","https://github.com/d0rb/CVE-2024-6387","https://github.com/CiderAndWhisky/regression-scanner","https://github.com/shamo0/CVE-2024-6387_PoC","https://github.com/paradessia/CVE-2024-6387-nmap","https://github.com/PrincipalAnthony/CVE-2024-6387-Updated-x64bit","https://github.com/daniel-odrinski/CVE-2024-6387-Mitigation-Ansible-Playbook","https://github.com/rumochnaya/openssh-cve-2024-6387.sh","https://github.com/zenzue/CVE-2024-6387-Mitigation","https://github.com/devarshishimpi/CVE-2024-6387-Check","https://github.com/hssmo/cve-2024-6387_AImade","https://github.com/ACHUX21/checker-CVE-2024-6387","https://github.com/AiGptCode/ssh_exploiter_CVE-2024-6387","https://github.com/xristos8574/regreSSHion-nmap-scanner","https://github.com/particle99/CVE-2024-6387-POC","https://github.com/xonoxitron/regreSSHion","https://github.com/no-one-sec/CVE-2024-6387","https://github.com/dawnl3ss/CVE-2024-6387","https://github.com/MrR0b0t19/CVE-2024-6387-Exploit-POC","https://github.com/th3gokul/CVE-2024-6387","https://github.com/n1cks0n/Test_CVE-2024-6387","https://github.com/l0n3m4n/CVE-2024-6387","https://github.com/RickGeex/CVE-2024-6387-Checker","https://github.com/xonoxitron/regreSSHion-checker","https://github.com/BrandonLynch2402/cve-2024-6387-nuclei-template","https://github.com/edsonjt81/CVE-2024-6387_Check","https://github.com/grupooruss/CVE-2024-6387","https://github.com/CognisysGroup/CVE-2024-6387-Checker","https://github.com/sxlmnwb/CVE-2024-6387","https://github.com/Symbolexe/CVE-2024-6387","https://github.com/harshinsecurity/sentinelssh","https://github.com/t3rry327/cve-2024-6387-poc","https://github.com/jocker2410/CVE-2024-6387_poc","https://github.com/JackSparrowhk/ssh-CVE-2024-6387-poc","https://github.com/turbobit/CVE-2024-6387-OpenSSH-Vulnerability-Checker","https://github.com/sms2056/CVE-2024-6387","https://github.com/invaderslabs/regreSSHion-CVE-2024-6387-","https://github.com/lala-amber/CVE-2024-6387","https://github.com/4lxprime/regreSSHive","https://github.com/sardine-web/CVE-2024-6387_Check","https://github.com/0x4D31/cve-2024-6387_hassh","https://github.com/sardine-web/CVE-2024-6387-template","https://github.com/imv7/CVE-2024-6387","https://github.com/azurejoga/CVE-2024-6387-how-to-fix","https://github.com/Karmakstylez/CVE-2024-6387","https://github.com/vkaushik-chef/regreSSHion","https://github.com/dgourillon/mitigate-CVE-2024-6387","https://github.com/mrmtwoj/CVE-2024-6387","https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker","https://github.com/kubota/CVE-2024-6387-Vulnerability-Checker","https://github.com/DimaMend/cve-2024-6387-poc","https://github.com/redux-sibi-jose/mitigate_ssh","https://github.com/dream434/CVE-2024-6387","https://github.com/Ap0dexMe0/CVE-2024-6387","https://github.com/prelearn-code/CVE-2024-6387","https://github.com/l-urk/CVE-2024-6387","https://github.com/alex14324/ssh_poc2024","https://github.com/X-Projetion/CVE-2023-4596-OpenSSH-Multi-Checker","https://github.com/s1d6point7bugcrowd/CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH","https://github.com/almogopp/OpenSSH-CVE-2024-6387-Fix","https://github.com/HadesNull123/CVE-2024-6387_Check","https://github.com/identity-threat-labs/CVE-2024-6387-Vulnerability-Checker","https://github.com/identity-threat-labs/Article-RegreSSHion-CVE-2024-6387","https://github.com/anhvutuan/CVE-2024-6387-poc-1","https://github.com/YassDEV221608/CVE-2024-6387","https://github.com/awusan125/test_for6387","https://github.com/kinu404/CVE-2024-6387","https://github.com/xiw1ll/CVE-2024-6387_Checker","https://github.com/moften/regreSSHion-CVE-2024-6387","https://github.com/OHHDamnBRO/Noregressh","https://github.com/Ngagne-Demba-Dia/CVE-2024-6387-corrigee","https://github.com/Doux-x/CVE-2024-6387-analysis","https://github.com/kaleth4/CVE-2024-6387","https://github.com/oseasfr/Scanner_CVE_OpenSSH","https://github.com/vuducmanhno100-cloud/CVE-2024-6387","https://github.com/m0n3ef/regreSSHion-Checker","https://github.com/al7araziruby-jpg/CVE-2024-6387-OpenSSH-Analysis","https://github.com/hasan8babiker/CVE-2024-6387"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.8","integrity_impact":"HIGH","has_exploit":true,"description":"When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main ...","published":"2024-06-21T20:15:10.630","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2020-27352","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://bugs.launchpad.net/snapd/+bug/1910456","https://bugs.launchpad.net/snapd/+bug/1910456"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Apport does not disable python crash handler before entering chroot","published":"2024-06-04T22:15:10.087","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-28657","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.1","integrity_impact":"HIGH","description":"is_closing_session() allows users to create arbitrary tcp dbus connections","published":"2024-06-04T22:15:09.940","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-28655","match_type":"product","confidentiality_impact":"NONE","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server\"s mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.","published":"2026-06-08T16:16:44.223","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-49975","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-","https://github.com/mrx-arafat/CVE-2026-49975-POC","https://github.com/obrige/http2-bomb","https://github.com/renzi25031469/CVE-2026-49975-HTTP-2-Bomb","https://github.com/EQSTLab/CVE-2026-49975","https://github.com/LSG-PolarBear/CVE-2026-49975","https://github.com/LiaoZiqi-GZFLS/CVE-2026-49975","https://github.com/minc-nice-100/http2-bomb-analysis-paper","https://github.com/razureink/cve-2026-49975-http2bomb_reproduction","https://github.com/0xc03307b/CVE-2026-49975","https://github.com/wlor0623/http2-bomb-detector"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.","published":"2026-06-08T16:16:43.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-48913","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:40.583","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-44631","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Loop with Unreachable Exit Condition (\"Infinite Loop\") vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to ...","published":"2026-06-08T16:16:40.453","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44186","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:40.327","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44185","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:39.263","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42536","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which ...","published":"2026-06-08T16:16:39.127","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42535","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes ...","published":"2026-06-08T16:16:38.537","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34356","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.","published":"2026-06-08T16:16:38.387","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34355","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:37.967","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-29167","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled ...","published":"2026-05-05T22:16:00.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-28780","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\"s mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes ...","published":"2026-05-05T14:16:08.507","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-29168","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for ...","published":"2026-05-04T15:16:03.720","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-29169","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","published":"2026-05-04T13:16:00.940","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-34059","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.8","integrity_impact":"HIGH","description":"An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.","published":"2026-05-04T13:16:00.297","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-24072","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.3","integrity_impact":"HIGH","has_exploit":true,"description":"Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd=\"...\" directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended ...","published":"2025-12-05T14:15:49.153","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2025-58098","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/dhmosfunk/CVE-2025-58098"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are ...","published":"2025-12-05T11:15:52.210","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-59775","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it ...","published":"2025-12-05T11:15:51.890","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-55753","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.","published":"2025-07-10T17:15:48.337","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-53020","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/galbarnahum/CVE-2025-53020-PoC"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.4","integrity_impact":"HIGH","description":"In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using \"SSLEngine optional\" to enable ...","published":"2025-07-10T17:15:48.193","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-49812","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2. Configurations affected are a reverse proxy is ...","published":"2025-07-10T17:15:48.050","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-49630","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clients is possible using TLS 1.3 session resumption. Configurations are affected when mod_ssl is configured for multiple virtual hosts, ...","published":"2025-07-10T17:15:46.553","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-23048","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used ...","published":"2025-07-10T17:15:46.400","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-47252","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from ...","published":"2025-07-10T17:15:46.133","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-43394","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response ...","published":"2025-07-10T17:15:45.987","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-43204","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as ...","published":"2025-07-10T17:15:45.343","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-42516","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue.","published":"2024-07-18T10:15:03.217","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-40898","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/anilpatel199n/CVE-2024-40898","https://github.com/ForceEA001/CVE-2024-40898-SSL-Bypass-Detection"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL\"s to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.","published":"2024-07-01T19:15:05.760","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-39573","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.","published":"2024-07-01T19:15:05.083","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38477","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to ...","published":"2024-07-01T19:15:04.977","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38476","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/abanop22333/Apache-Authentication-Flaw-Research-CVE-2024-38476-"],"match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","has_exploit":true,"description":"Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting ...","published":"2024-07-01T19:15:04.883","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-38475","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/p0in7s/CVE-2024-38475","https://github.com/soltanali0/CVE-2024-38475","https://github.com/abrewer251/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC","https://github.com/syaifulandy/CVE-2024-38475","https://github.com/Nyakki-Labs-0x420/Myesve"],"match_product":"Apache 2.4.58"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to ...","published":"2024-07-01T19:15:04.760","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38474","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"NONE","has_exploit":true,"description":"Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version ...","published":"2024-07-01T19:15:04.657","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38473","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Abdurahmon3236/CVE-2024-38473","https://github.com/juanschallibaum/CVE-2024-38473-Nuclei-Template"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that ...","published":"2024-07-01T19:15:04.563","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-38472","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Abdurahmon3236/CVE-2024-38472","https://github.com/mrmtwoj/apache-vulnerability-testing"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.","published":"2024-04-04T20:15:08.720","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-27316","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/lockness-Ko/CVE-2024-27316","https://github.com/aeyesec/CVE-2024-27316_poc"],"match_product":"Apache 2.4.58"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","has_exploit":true,"description":"Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.","published":"2024-04-04T20:15:08.047","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2023-38709","match_type":"cpe","confidentiality_impact":"LOW","exploit_links":["https://github.com/mrmtwoj/apache-vulnerability-testing"],"match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.5","integrity_impact":"NONE","description":"Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended ...","published":"2026-06-08T16:16:40.203","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-44119","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"LOW","description":"Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.","published":"2026-06-08T16:16:40.087","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-43951","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.1","integrity_impact":"LOW","description":"A cross-site scripting vulnerability exists in mod_proxy_ftp\"s HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to ...","published":"2026-06-08T16:16:38.093","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2026-29170","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"LOW","description":"HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the ...","published":"2026-05-04T15:16:04.227","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33523","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, ...","published":"2026-05-04T15:16:04.107","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-33007","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"HIGH","base_score":"4.8","integrity_impact":"LOW","description":"A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue.","published":"2026-05-04T15:16:03.977","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33006","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","published":"2026-05-04T14:16:33.447","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-34032","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","published":"2026-05-04T14:16:33.253","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33857","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.4","integrity_impact":"LOW","description":"mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP ...","published":"2025-12-05T11:15:52.747","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2025-66200","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"LOW","description":"Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue ...","published":"2025-12-05T11:15:52.497","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-65082","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.4","integrity_impact":"LOW","description":"Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.","published":"2024-07-01T19:15:03.497","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2024-36387","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.58"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.3","integrity_impact":"LOW","description":"HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, ...","published":"2024-04-04T20:15:08.663","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"REQUIRED","name":"CVE-2024-24795","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.58"}],"@timestamp":"2026-08-19T09:13:10.200Z","port":8333,"whois":{"related_nets":[],"net":{"country":"AR","address":"Viamonte, 1133, Piso 9\nC1053ABW - Capital Federal -","created":"20130618","start_ip":"181.225.0.0","range":"181.225.0.0 - 181.225.31.255","description":"Telefona Pblica y Privada S.A.","handle":"FEM11","cidr":["181.225.0.0/19"],"net_size":8191,"updated":"20130618","end_ip":"181.225.31.255","contacts":{"emails":["niellar@tpp.com.ar"],"persons":["Reinaldo Niella"]}},"asn":{"number":["52232"],"country":"AR","registry":"lacnic","name":"AS52232 - Telefonia Publica y Privada S.A.","cidr":"181.225.10.0/24","updated":"2013-06-18"}},"host":"181.225.12.91","http":{"headers":{"date":["Wed, 19 Aug 2026 09:09:22 GMT"],"server":["Apache/2.4.58 (Ubuntu)"],"accept_ranges":["bytes"],"content_type":["text/html"],"vary":["Accept-Encoding"],"etag":["\"29af-63f7a7a8bfc78-gzip\""],"last_modified":["Tue, 23 Sep 2025 16:32:14 GMT"]},"status_code":200,"body_sha256":"6faef4d5d777fdcaa653766b0ac8b9ed32d0fd87f7dcd79f02ff524dd1b0eb69","meta":["http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" "],"body":"\n\n \n \n \n Apache2 Ubuntu Default Page: It works\n \n \n \n
    \n
    \n \"Ubuntu\n
    \n \n Apache2 Default Page\n \n
    \n
    \n
    \n It works!\n
    \n\n
    \n
    \n
    \n

    \n This is the default welcome page used to test the correct \n operation of the Apache2 server after installation on Ubuntu systems.\n It is based on the equivalent page on Debian, from which the Ubuntu Apache\n packaging is derived.\n If you can read this page, it means that the Apache HTTP server installed at\n this site is working properly. You should replace this file (located at\n /var/www/html/index.html) before continuing to operate your HTTP server.\n

    \n\n

    \n If you are a normal user of this web site and don't know what this page is\n about, this probably means that the site is currently unavailable due to\n maintenance.\n If the problem persists, please contact the site's administrator.\n

    \n\n
    \n
    \n
    \n Configuration Overview\n
    \n
    \n

    \n Ubuntu's Apache2 default configuration is different from the\n upstream default configuration, and split into several files optimized for\n interaction with Ubuntu tools. The configuration system is\n fully documented in\n /usr/share/doc/apache2/README.Debian.gz. Refer to this for the full\n documentation. Documentation for the web server itself can be\n found by accessing the manual if the apache2-doc\n package was installed on this server.\n

    \n

    \n The configuration layout for an Apache2 web server installation on Ubuntu systems is as follows:\n

    \n 
    \n/etc/apache2/\n|-- apache2.conf\n|       `--  ports.conf\n|-- mods-enabled\n|       |-- *.load\n|       `-- *.conf\n|-- conf-enabled\n|       `-- *.conf\n|-- sites-enabled\n|       `-- *.conf\n
    \n
      \n
    • \n apache2.conf is the main configuration\n file. It puts the pieces together by including all remaining configuration\n files when starting up the web server.\n
      • \n\n
    • \n ports.conf is always included from the\n main configuration file. It is used to determine the listening ports for\n incoming connections, and this file can be customized anytime.\n
      • \n\n
    • \n Configuration files in the mods-enabled/,\n conf-enabled/ and sites-enabled/ directories contain\n particular configuration snippets which manage modules, global configuration\n fragments, or virtual host configurations, respectively.\n
      • \n\n
    • \n They are activated by symlinking available\n configuration files from their respective\n *-available/ counterparts. These should be managed\n by using our helpers\n \n a2enmod,\n a2dismod,\n \n \n a2ensite,\n a2dissite,\n \n and\n \n a2enconf,\n a2disconf\n . See their respective man pages for detailed information.\n
      • \n\n
    • \n The binary is called apache2 and is managed using systemd, so to\n start/stop the service use systemctl start apache2 and\n systemctl stop apache2, and use systemctl status apache2\n and journalctl -u apache2 to check status. system\n and apache2ctl can also be used for service management if\n desired.\n Calling /usr/bin/apache2 directly will not work with the\n default configuration.\n
      • \n
    \n
    \n\n
    \n
    \n Document Roots\n
    \n\n
    \n

    \n By default, Ubuntu does not allow access through the web browser to\n any file outside of those located in /var/www,\n public_html\n directories (when enabled) and /usr/share (for web\n applications). If your site is using a web document root\n located elsewhere (such as in /srv) you may need to whitelist your\n document root directory in /etc/apache2/apache2.conf.\n

    \n

    \n The default Ubuntu document root is /var/www/html. You\n can make your own virtual hosts under /var/www.\n

    \n
    \n\n
    \n
    \n Reporting Problems\n
    \n
    \n

    \n Please use the ubuntu-bug tool to report bugs in the\n Apache2 package with Ubuntu. However, check existing bug reports before reporting a new bug.\n

    \n

    \n Please report bugs specific to modules (such as PHP and others)\n to their respective packages, not to the web server itself.\n

    \n
    \n\n
    \n
    \n
    \n
    \n \n\n","status_line":"200 OK","title":"Apache2 Ubuntu Default Page: It works","version":"1.1","content_length":-1},"tag":[{"name":"apache_http_server","cpe":["cpe:2.3:a:apache:http_server:2.4.58:*:*:*:*:*:*:*"],"description":"Apache is a free and open-source cross-platform web server software.","fullname":"Apache HTTP Server","category":["Web servers"],"apache_http_server":{"version":"2.4.58"}},{"ubuntu":{"version":""},"name":"ubuntu","cpe":["cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*"],"description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","fullname":"Ubuntu","category":["Operating systems"]},{"apache":{"version":"2.4.58"},"name":"apache","cpe":["cpe:2.3:a:apache:http_server:2.4.58:*:*:*:*:*:*:*"],"description":"Apache is a free and open-source cross-platform web server software.","fullname":"Apache","category":["Web servers"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"isp":"M1","ip":"175.156.65.150","certificate":{"issuer_dn":"C=US, O=Let's Encrypt, CN=YE1","fingerprint_md5":"585e063853c32d81d2931152297cddc0","chain":[{"issuer_dn":"C=US, O=ISRG, CN=Root YE","fingerprint_md5":"56c80ed1f5dc74dc0979607f6359ec0b","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGUCMQDgjUEahFT/h3DRakqiPZpLvPgfZwkt6K2EOMmh1nvEzl83eMLYcod4GCl3b0J1Nn0CMBNYmEQJb4CEG5WoOe7aRn/LVKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA==","self_signed":false},"subject":{"country":["US"],"organization":["Let's Encrypt"],"common_name":["YE1"]},"serial_number":"124767990368497485228327191697811835646","version":3,"issuer":{"country":["US"],"organization":["ISRG"],"common_name":["Root YE"]},"fingerprint_sha256":"a2372d06431e9716365eeed47ec020351497d182fcc038e457e58168a03cac07","tbs_noct_fingerprint":"da927a1e4ae18a673c4940abe1fc67d5bcf20340347b070ca5999f5b7fd0ad48","tbs_fingerprint":"da927a1e4ae18a673c4940abe1fc67d5bcf20340347b070ca5999f5b7fd0ad48","extensions":{"crl_distribution_points":["http://ye.c.lencr.org/"],"subject_key_id":"bb20ca470bfed7e59cf98f092aa38c3745b1bcd8","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"digital_signature":true,"certificate_sign":true,"crl_sign":true,"value":97},"authority_key_id":"a3c8265a8ea14cd03563fc9b23c83aae56f34f56","authority_info_access":{"issuer_urls":["http://ye.i.lencr.org/"]},"basic_constraints":{"max_path_len":0,"is_ca":true},"extended_key_usage":{"server_auth":true}},"subject_dn":"C=US, O=Let's Encrypt, CN=YE1","fingerprint_sha1":"d09370a9864982a5047da46373540256d08a3c81","spki_subject_fingerprint":"46b2d808bc20245f2b44fb229c92d1f5147ca4317b42a687b7c4767b035f1294","validity":{"start":"2025-09-03T00:00:00Z","length":94694399,"end":"2028-09-02T23:59:59Z"},"validation_level":"DV"},{"issuer_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X2","fingerprint_md5":"cddedecf5a284a1b68b3b6bd50052659","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGYCMQDFNfVgrZsVTQ/FBwWUaJmuPWe4z7OuA5mtHk7tTgoVWwf9iexld572CgMeeLpNRvUCMQDtJoi1SbvDyzYl115IhP4LCtwk0Uxf2nqOGzF+NmcONHLEVOgAtuoUltfyFmmrOnY=","self_signed":false},"subject":{"country":["US"],"organization":["ISRG"],"common_name":["Root YE"]},"serial_number":"179619193732476545641173103431506703674","version":3,"issuer":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X2"]},"fingerprint_sha256":"0fc0901cca2bae9e9fdbb02d50d02f1094f7b36672086991b9e897626dc485f0","tbs_noct_fingerprint":"369d1cf858e309c02aa2824c3763e12c05975e03291bff2bb462567bcbe93f21","tbs_fingerprint":"369d1cf858e309c02aa2824c3763e12c05975e03291bff2bb462567bcbe93f21","extensions":{"crl_distribution_points":["http://x2.c.lencr.org/"],"subject_key_id":"a3c8265a8ea14cd03563fc9b23c83aae56f34f56","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"certificate_sign":true,"crl_sign":true,"value":96},"authority_key_id":"7c4296aede4b483bfa92f89e8ccf6d8ba9723795","authority_info_access":{"issuer_urls":["http://x2.i.lencr.org/"]},"basic_constraints":{"is_ca":true},"extended_key_usage":{"server_auth":true}},"subject_dn":"C=US, O=ISRG, CN=Root YE","fingerprint_sha1":"f37620fc4b1cddd2a3d74b1d5e8db42e244ca006","spki_subject_fingerprint":"06d2b2f7d6dd24ec3fb81bf4825876669dde75f6e14cc0d00904ffeb4f10985d","validity":{"start":"2026-05-13T00:00:00Z","length":199151999,"end":"2032-09-02T23:59:59Z"},"validation_level":"DV"},{"issuer_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X1","fingerprint_md5":"5292fa0079c5afae289c2d2141236e04","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"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","self_signed":false},"subject":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X2"]},"serial_number":"144299725964134815114551462777128548813","version":3,"issuer":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X1"]},"fingerprint_sha256":"ee5f7abd6981bb0255632cd8f49283451b4b18844d12040b44ee00f07b8fe2c6","tbs_noct_fingerprint":"8c5033973ffe4ff1ef0aa92984fc93281ba7a9278ef8bf641226b898d10d4e74","tbs_fingerprint":"8c5033973ffe4ff1ef0aa92984fc93281ba7a9278ef8bf641226b898d10d4e74","extensions":{"crl_distribution_points":["http://x1.c.lencr.org/"],"subject_key_id":"7c4296aede4b483bfa92f89e8ccf6d8ba9723795","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"certificate_sign":true,"crl_sign":true,"value":96},"authority_key_id":"79b459e67bb6e5e40173800888c81a58f6e99b6e","authority_info_access":{"issuer_urls":["http://x1.i.lencr.org/"]},"basic_constraints":{"is_ca":true},"extended_key_usage":{"client_auth":true,"server_auth":true}},"subject_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X2","fingerprint_sha1":"3c34e356c7fc17f5acf04824bc587c6c623951a2","spki_subject_fingerprint":"2223f064e46b9faf6802d8d75d2d2503c538a19c20c42c0910cef935dac1ac47","validity":{"start":"2026-05-13T00:00:00Z","length":199151999,"end":"2032-09-02T23:59:59Z"},"validation_level":"DV"}],"redacted":false,"src":"https://175.156.65.150:8333/","signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGYCMQCNhD2DHau8z8BohMYUPkeFCXUq4cO6cdCFgPe6IcL05n0JqU24M/mLNJQz3HiO1ssCMQCB1QhUevq2DZssMLfd+9soAusedsPNuyuMuD/f8ZjEfEiWMKAuDwINZ4JAqf0WZnQ=","self_signed":false},"subject":{"common_name":["chinghang.synology.me"]},"serial_number":"448935323243547312304197219860446665142283","version":3,"issuer":{"country":["US"],"organization":["Let's Encrypt"],"common_name":["YE1"]},"fingerprint_sha256":"e39efba33c52c447fc64e2e16ea08190bd35c652280c5eafe827ece10a810e02","tbs_noct_fingerprint":"ae0665498253cd52531b153076b0f85ca2f7b650b460ae4cbd849430f1cab03c","tbs_fingerprint":"495032a9d16bda4533f7a98b61a73bf02fed85dae0735562898d40f523dcf9cc","extensions":{"crl_distribution_points":["http://ye1.c.lencr.org/12.crl"],"subject_key_id":"1c6b2d005297db1c2bd50b760b957bba2b136019","certificate_policies":[{"id":"2.23.140.1.2.1"}],"key_usage":{"digital_signature":true,"value":1},"authority_key_id":"bb20ca470bfed7e59cf98f092aa38c3745b1bcd8","subject_alt_name":{"dns_names":["*.chinghang.synology.me","chinghang.synology.me"]},"signed_certificate_timestamps":[{"log_id":"1219ENGn9XfCx+lf1wC/+YLJM1pl4dCzAXMXwMjFaXc=","signature":"BAMARzBFAiBJWInnCl/oYlGIyTQnf8vqaTJywoCpm6MhT8SSvmCZrgIhANc+JU0IbZm+jTQv4LP6Br1J5tO35nt1VRK1mpCln4v8","version":0,"timestamp":1782177981},{"log_id":"Goudaw/+v4G0eTnG0jEKhtbRAtTwRuIYLJ3jX14mJe8=","extensions":"AAAFACIWKJ8=","signature":"BAMARzBFAiAmO+WsKNzewXjKsDZBXHL/w/RO0j4QGJX4pnOrIzqCxQIhAIIwRe64R+hKGIHbcru5fOlfhgAXdmN4V32IQWZb+PFC","version":0,"timestamp":1782177981}],"authority_info_access":{"issuer_urls":["http://ye1.i.lencr.org/"]},"basic_constraints":{"is_ca":false},"extended_key_usage":{"server_auth":true}},"names":["*.chinghang.synology.me","chinghang.synology.me"],"subject_dn":"CN=chinghang.synology.me","fingerprint_sha1":"310771dc24287edb19d72392363d7f5beeea9474","spki_subject_fingerprint":"dc55854eee1710fd0d859002e69f0a10c3c87601f3f63d5764aabc6345537d53","validity":{"start":"2026-06-23T00:27:51Z","length":7775999,"end":"2026-09-21T00:27:50Z"},"validation_level":"DV"},"uri":"https://175.156.65.150:8333/","host_type":"ip","prot7":"http","target":{"ip":"175.156.65.150","type":"ip"},"geo":{"continent":"Asia","country":"SG","tz":"Asia/Singapore","accuracy":5,"location":{"lon":103.8547,"lat":1.2929},"registered_country":"SG"},"path":"/","protocol":"https","prot4":"tcp","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","published":"2023-10-10T14:15:10.883","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-44487","match_type":"product","confidentiality_impact":"NONE","match_product":"Nginx","exploit_links":["https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/Appsynergy-io/CVE-2023-44487","https://github.com/ByteHackr/CVE-2023-44487","https://github.com/pabloec20/rapidreset","https://github.com/secengjeff/rapidresetclient","https://github.com/studiogangster/CVE-2023-44487","https://github.com/ReToCode/golang-CVE-2023-44487","https://github.com/ndrscodes/http2-rst-stream-attacker","https://github.com/nxenon/cve-2023-44487","https://github.com/sigridou/CVE-2023-44487-","https://github.com/TYuan0816/cve-2023-44487","https://github.com/sn130hk/CVE-2023-44487","https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC","https://github.com/aulauniversal/CVE-2023-44487","https://github.com/BMG-Black-Magic/CVE-2023-44487","https://github.com/moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack","https://github.com/zanks08/cve-2023-44487-demo","https://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Reset","https://github.com/tpirate/cve-2023-44487-POC","https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos","https://github.com/sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-","https://github.com/TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab","https://github.com/Hirokiii/CVE-2023-44487","https://github.com/madhantr0/http2-security-lab","https://github.com/tahaXafous/CVE-2023-44487-dos","https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","has_exploit":true,"description":"When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets ...","published":"2025-02-05T18:15:33.347","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-23419","match_type":"product","confidentiality_impact":"LOW","match_product":"Nginx","exploit_links":["https://github.com/harley-ghostie/safe-check-CVE-2025-23419","https://github.com/xitexploiter96-dot/CVE-2025-23419"]}],"@timestamp":"2026-08-19T06:57:40.162Z","whois":{"abuse":"abuse@m1.com.sg","related_nets":[{"start_ip":"175.156.0.0","range":"175.156.0.0 - 175.156.0.255","description":"M1 Limited\n Internet Service Provider\n 10 International Business Park,\n Singapore 609928","net_size":255,"cidr":["175.156.0.0/24"],"updated":"2021-07-14T09:44:36Z","end_ip":"175.156.0.255"}],"net":{"country":"SG","address":"10 International Business Park,\nSingapore 609928","name":"M1Net","start_ip":"175.156.0.0","range":"175.156.0.0 - 175.156.127.255","description":"M1 Ltd","handle":"AM2690-AP","net_size":32767,"cidr":["175.156.0.0/17"],"updated":"2021-01-18T03:44:00Z","end_ip":"175.156.127.255","contacts":{"emails":["peering@m1.com.sg","abuse@m1.com.sg","hostmaster@m1.com.sg","vas@m1.com.sg"],"persons":["M1 Hostmaster"],"phones":["+000000000","+65 66551111"]}},"asn":{"country":"SG","registry":"apnic","number":["4773"],"name":"MOBILEONELTD-AS-AP - MobileOne Ltd. Mobile/Internet Service Provider Singapore","cidr":"175.156.0.0/16","updated":"2010-01-12"}},"port":8333,"host":"175.156.65.150","http":{"headers":{"date":["Wed, 19 Aug 2026 06:54:25 GMT"],"server":["nginx"],"accept_ranges":["bytes"],"content_type":["text/html"],"cache_control":["no-cache"],"etag":["\"6a4d37ba-220\""],"connection":["keep-alive"],"keep_alive":["timeout=20"],"last_modified":["Tue, 07 Jul 2026 17:30:34 GMT"],"content_length":["544"]},"status_code":200,"body_sha256":"05932dc2da8d51fb5c2293be821dd2f07669828f2336ae75be1bacb0ba5d36eb","body":"\n\n \n \n \n \n \n \n\n","status_line":"200 OK","version":"1.1","content_length":544},"tag":[{"nginx":{"version":""},"name":"nginx","cpe":["cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"],"description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","fullname":"Nginx","category":["Web servers","Reverse proxies"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"jarm":"21d19d00021d21d00042d43d0000001cf1edc2aa7242ae5c6e08704bc03530","ip":"181.196.138.254","isp":"Corporacion Nacional De Telecomunicaciones - Cnt E","certificate":{"issuer_dn":"C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36","fingerprint_md5":"9111fbeb624a3383f54bce028cbb7d5a","src":"https://181.196.138.254:8333/","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"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","self_signed":false},"subject":{"country":["EC"],"province":["Pichincha"],"organization":["Unidad de Análisis Financiero y Económico Uafe"],"common_name":["*.uafe.gob.ec"]},"serial_number":"246331259505713101741587004913017828019","version":3,"issuer":{"country":["GB"],"organization":["Sectigo Limited"],"common_name":["Sectigo Public Server Authentication CA OV R36"]},"tbs_noct_fingerprint":"307bfa6f0514d6c5a35226452d92dcdf576ff04011cf4ae8ad0cad95cd2a7759","fingerprint_sha256":"7e3a423fbe762ef0999c351cd4adc7b20185bfd31a7e4d83c70049922920d42b","tbs_fingerprint":"bc35e1824add108b6a294dd20958b174067eb931c90a03f2fc79d6ef8a94fab9","extensions":{"crl_distribution_points":["http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl"],"subject_key_id":"404d8442cf3980ba7c7a983ce0309bbf50ceda58","certificate_policies":[{"cps":["https://sectigo.com/CPS"],"id":"1.3.6.1.4.1.6449.1.2.1.3.4"},{"id":"2.23.140.1.2.2"}],"authority_key_id":"e36674bb70688d2c5d4e0ea64a8f9b37229c8292","key_usage":{"digital_signature":true,"key_encipherment":true,"value":5},"subject_alt_name":{"dns_names":["*.uafe.gob.ec","uafe.gob.ec"]},"signed_certificate_timestamps":[{"log_id":"YEyar3p/d18B1Ab8kg3ImesLHH34yVIb+voXdzuXi8k=","signature":"BAMARzBFAiEAgDS8u5OULHt9Te0JnM210JjrdPqWf5y5FKcuyM5SEGECIBjzuo4Ec1rkzQKFZGrn3e8atXvV+E2HLY0mx9Onhs8j","version":0,"timestamp":1765229493},{"log_id":"jspHC6zeavOiBrCkeoS3Rv4fxr+VPiXmm07kAkjzxug=","extensions":"AAAFAABlgTU=","signature":"BAMARzBFAiEAsKH9plXZJwtn+TmXHj/41BWSsurdhamOFFJfmI/NO04CIG+QQ2DctAdZgOJin44AkY0RPACtRPjpWXO8xxLFD01C","version":0,"timestamp":1765229494},{"log_id":"WW5sM4aUsllyolbIoOjdkEp26Ag92oc7AQg4KBQ87lk=","extensions":"AAAFAAAA2Ug=","signature":"BAMARzBFAiA6qFacGWRBBQS1g6Er6/uwjpDQh62CiZoY74W14IY4GwIhAL/nAcdHBdwgdbTqYPrjiNaRJlVCbJkFpFFYWdEyjh7U","version":0,"timestamp":1765229494}],"authority_info_access":{"issuer_urls":["http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt"],"ocsp_urls":["http://ocsp.sectigo.com"]},"basic_constraints":{"is_ca":false},"extended_key_usage":{"client_auth":true,"server_auth":true}},"subject_dn":"C=EC, ST=Pichincha, O=Unidad de Análisis Financiero y Económico Uafe, CN=*.uafe.gob.ec","names":["*.uafe.gob.ec","uafe.gob.ec"],"fingerprint_sha1":"cbac16e936d2010e702c052c123429ecaeac32af","spki_subject_fingerprint":"10ed29db523ef7e7efc36cd364643eca56f8ad68e312c9733fe80f57b1faed28","validity":{"length":34300799,"start":"2025-12-08T00:00:00Z","end":"2027-01-08T23:59:59Z"},"validation_level":"OV"},"uri":"https://181.196.138.254:8333/","host_type":"ip","target":{"ip":"181.196.138.254","type":"ip"},"prot7":"http","geo":{"continent":"South America","country":"EC","city":"Guayaquil","tz":"America/Guayaquil","accuracy":20,"location":{"lon":-79.8764,"lat":-2.1978},"registered_country":"EC","subdivisions":["Provincia del Guayas"]},"path":"/","prot4":"tcp","protocol":"https","@timestamp":"2026-08-19T06:25:43.799Z","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","published":"2023-10-10T14:15:10.883","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-44487","match_type":"product","confidentiality_impact":"NONE","match_product":"Nginx","exploit_links":["https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/Appsynergy-io/CVE-2023-44487","https://github.com/ByteHackr/CVE-2023-44487","https://github.com/pabloec20/rapidreset","https://github.com/secengjeff/rapidresetclient","https://github.com/studiogangster/CVE-2023-44487","https://github.com/ReToCode/golang-CVE-2023-44487","https://github.com/ndrscodes/http2-rst-stream-attacker","https://github.com/nxenon/cve-2023-44487","https://github.com/sigridou/CVE-2023-44487-","https://github.com/TYuan0816/cve-2023-44487","https://github.com/sn130hk/CVE-2023-44487","https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC","https://github.com/aulauniversal/CVE-2023-44487","https://github.com/BMG-Black-Magic/CVE-2023-44487","https://github.com/moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack","https://github.com/zanks08/cve-2023-44487-demo","https://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Reset","https://github.com/tpirate/cve-2023-44487-POC","https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos","https://github.com/sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-","https://github.com/TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab","https://github.com/Hirokiii/CVE-2023-44487","https://github.com/madhantr0/http2-security-lab","https://github.com/tahaXafous/CVE-2023-44487-dos","https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","has_exploit":true,"description":"When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets ...","published":"2025-02-05T18:15:33.347","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-23419","match_type":"product","confidentiality_impact":"LOW","match_product":"Nginx","exploit_links":["https://github.com/harley-ghostie/safe-check-CVE-2025-23419","https://github.com/xitexploiter96-dot/CVE-2025-23419"]}],"port":8333,"host":"181.196.138.254","http":{"headers":{"date":["Wed, 19 Aug 2026 06:19:20 GMT"],"server":["nginx"],"accept_ranges":["bytes"],"x_content_type_options":["nosniff"],"content_type":["text/html"],"strict_transport_security":["max-age=31536000; includeSubDomains; preload"],"cache_control":["no-cache,no-store,must-revalidate"],"etag":["\"6a834857-13203\""],"connection":["keep-alive"],"last_modified":["Mon, 17 Aug 2026 17:43:51 GMT"],"content_length":["78339"],"x_frame_options":["DENY"]},"status_code":200,"body_sha256":"fe41830d50813268b86a1a4ae0f2c89286ee7f9323c2e8a9b991e34b08526928","meta":["charset=\"utf-8\"","name=\"google\" content=\"notranslate\"","http-equiv=\"Content-Security-Policy\" content=\"style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https://*; child-src 'none';\"","name=\"viewport\" content=\"width=device-width, initial-scale=1\""],"body":"\n\n\n\n \n \n \n\n SSO - UAFE\n \n \n \n\n \n \n \n\n\n\n \n
    \n
    \n \n
    \n
    \n     \n\n\n\n","status_line":"200 OK","title":"SSO - UAFE","version":"1.1","content_length":78339},"tag":[{"name":"hsts","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","hsts":{"version":""},"fullname":"HSTS","category":["Security"]},{"nginx":{"version":""},"name":"nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","cpe":["cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"],"fullname":"Nginx","category":["Web servers","Reverse proxies"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"ip":"187.232.37.1","isp":"Telmex DSL","certificate":{"issuer_dn":"CN=quanter.no-ip.org, O=QUANTER, C=MX, ST=Ags, L=Ags","fingerprint_md5":"70bfe8df6f827273502074724f9f27f5","signature":{"valid":true,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"ClBsoU7kWJELhhENQf5snpiOwFCtOdiF+moYIWXqrkbPcaVKapjHmHlEpCEMQDkALkw9WkNcjkWmfG0RGVNhK7j3eHkcdXZZb1PcWN8S0GYzQEbUigPbdVelWRjRT9FLgbl/xm4ysA+llS02Ks57DXLJvsb515K1NBwQXpIb/jd8tcc5xAKNFngniGa7ZP6M5u3YJuDHJ87P6VGFN3BlDr9QGCR1OqugeCVR3YKzdhlTfs3x9f82r3QzcTqRWdZm8OM7P3ucbHyI3k6loGOdUB/w7g+SP3MGnvk8Umubsk7NE33cIdIOj2v4MJdg1lQEWkLchqsIvRewLUfYTwpHCw==","self_signed":true},"redacted":false,"src":"https://187.232.37.1:8333/","subject":{"country":["MX"],"province":["Ags"],"organization":["QUANTER"],"locality":["Ags"],"common_name":["quanter.no-ip.org"]},"serial_number":"17670163398189363804","version":3,"issuer":{"country":["MX"],"province":["Ags"],"organization":["QUANTER"],"locality":["Ags"],"common_name":["quanter.no-ip.org"]},"tbs_noct_fingerprint":"7590124a7f44c9a795a7badebb6f9d49dfabc8ddd13cdc92984c40961f6fdf22","fingerprint_sha256":"55d1517a14b4300c2bfe89b9f2ffe0cb2223f52aac47aa4bb0beae7cd2c458ff","tbs_fingerprint":"7590124a7f44c9a795a7badebb6f9d49dfabc8ddd13cdc92984c40961f6fdf22","extensions":{"key_usage":{"data_encipherment":true,"key_encipherment":true,"value":12},"subject_alt_name":{"dns_names":["quanter.no-ip.org"]},"extended_key_usage":{"server_auth":true}},"subject_dn":"CN=quanter.no-ip.org, O=QUANTER, C=MX, ST=Ags, L=Ags","names":["quanter.no-ip.org"],"fingerprint_sha1":"f54b1dc2e332589ab00b91650abb3919d8032abe","spki_subject_fingerprint":"815f3bf21ddd3985958b1040348fe3869206ee470eb843743a913a1bfc6d8010","validity":{"length":315360000,"start":"2024-02-23T17:40:02Z","end":"2034-02-20T17:40:02Z"},"validation_level":"unknown"},"uri":"https://187.232.37.1:8333/","host_type":"ip","prot7":"http","target":{"ip":"187.232.37.1","type":"ip"},"geo":{"continent":"North America","country":"MX","city":"Aguascalientes","tz":"America/Mexico_City","accuracy":5,"location":{"lon":-102.2816,"lat":21.8735},"postal":"20064","registered_country":"MX","subdivisions":["Aguascalientes"]},"path":"/","prot4":"tcp","protocol":"https","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server\"s mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.","published":"2026-06-08T16:16:44.223","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-49975","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-","https://github.com/mrx-arafat/CVE-2026-49975-POC","https://github.com/obrige/http2-bomb","https://github.com/renzi25031469/CVE-2026-49975-HTTP-2-Bomb","https://github.com/EQSTLab/CVE-2026-49975","https://github.com/LSG-PolarBear/CVE-2026-49975","https://github.com/LiaoZiqi-GZFLS/CVE-2026-49975","https://github.com/minc-nice-100/http2-bomb-analysis-paper","https://github.com/razureink/cve-2026-49975-http2bomb_reproduction","https://github.com/0xc03307b/CVE-2026-49975","https://github.com/wlor0623/http2-bomb-detector"],"match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.","published":"2026-06-08T16:16:43.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-48913","match_type":"product","confidentiality_impact":"LOW","match_product":"Apache HTTP Server"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:40.583","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-44631","match_type":"product","confidentiality_impact":"HIGH","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Loop with Unreachable Exit Condition (\"Infinite Loop\") vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to ...","published":"2026-06-08T16:16:40.453","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44186","match_type":"product","confidentiality_impact":"LOW","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:40.327","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44185","match_type":"product","confidentiality_impact":"LOW","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:39.263","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42536","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which ...","published":"2026-06-08T16:16:39.127","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42535","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes ...","published":"2026-06-08T16:16:38.537","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34356","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.","published":"2026-06-08T16:16:38.387","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34355","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:37.967","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-29167","match_type":"product","confidentiality_impact":"HIGH","match_product":"Apache HTTP Server"}],"@timestamp":"2026-08-19T03:57:50.900Z","port":8333,"whois":{"related_nets":[],"net":{"country":"MX","address":"AVENIDA (AV.) INSURGENTES SUR, 3500, PISO 4 PEA POBRE\n14060 - TLALPAN - CX","created":"20130403","start_ip":"187.229.0.0","range":"187.229.0.0 - 187.229.255.255","description":"UNINET","handle":"GEC10","cidr":["187.229.0.0/16"],"net_size":65535,"end_ip":"187.229.255.255","updated":"20130403","contacts":{"emails":["gccips@uninet.com.mx","gccips1@reduno.com.mx","abuse@uninet.net.mx"],"persons":["Santiago Ricardo Ramirez Luna","GESTION DE CAMBIOS","SEGURIDAD DE RED UNINET"]}},"asn":{"country":"MX","registry":"lacnic","updated":"2011-07-11"}},"host":"187.232.37.1","http":{"headers":{"date":["Wed, 19 Aug 2026 03:46:13 GMT"],"server":["Apache"],"content_type":["text/html; charset=iso-8859-1"],"www_authenticate":["Basic realm=\"VisualSVN Server\""],"content_length":["401"],"x_frame_options":["SAMEORIGIN"]},"status_code":401,"body_sha256":"a0f4bdb216ccd677e0e7260a3fad50a7dc056db1fee3837fab920237306e802c","body":"\n\n401 Authorization Required\n\n

    Authorization Required

    \n

    This server could not verify that you\nare authorized to access the document\nrequested. Either you supplied the wrong\ncredentials (e.g., bad password), or your\nbrowser doesn't understand how to supply\nthe credentials required.

    \n\n","status_line":"401 Authorization Required","title":"401 Authorization Required","version":"1.1","content_length":401},"tag":[{"name":"basic","description":"Basic is an authetication method used by some web servers.","fullname":"Basic","basic":{"version":""},"category":["Security"]},{"name":"apache_http_server","cpe":["cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"],"description":"Apache is a free and open-source cross-platform web server software.","fullname":"Apache HTTP Server","category":["Web servers"],"apache_http_server":{"version":""}},{"apache":{"version":""},"name":"apache","description":"Apache is a free and open-source cross-platform web server software.","cpe":["cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"],"fullname":"Apache","category":["Web servers"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"ip":"187.209.130.27","isp":"Telmex DSL","certificate":{"issuer_dn":"emailAddress=docker@createyourown.domain, C=DE, ST=BY, L=Hintertupfing, O=Dorfwirt, OU=Theke, CN=www.createyourown.domain, emailAddress=docker@createyourown.domain","fingerprint_md5":"92b4d1e9a9ebead0eaa0a3cf32755070","src":"https://187.209.130.27:8333/","redacted":false,"signature":{"valid":true,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"PpeA3GkRR68mYAifX+8/vJ3K/rJ4UPSuAu9OookyIJXhtsNl1Te9NRdBneXFjkTS7f6jVi2O4fYgaC6RmWlRSAA+N6UkPCSQZdPsxsPoz/rOVC0of0wvs0CfoS2TagInAhGDTo2gruNVAlzVzXW1OsXHx+R0sVqbaHwZuNbcPytt4i+CuBM54GT6kda39d461oF1ZYg1jmtaQYAkn/HEaSczC4QlqRELTr8wK4D7gxr/31ofEWDXvwAQzKDquq4jWlbaNphW8wyOCPzaxf92FpuA14kdbxN69lU31Md26ocH0hhTGX64NYVR2qd3ZntXbIMwtlQwj3qX7gt+ReC4fA==","self_signed":true},"subject":{"country":["DE"],"email_address":["docker@createyourown.domain"],"province":["BY"],"organization":["Dorfwirt"],"locality":["Hintertupfing"],"common_name":["www.createyourown.domain"],"organizational_unit":["Theke"]},"serial_number":"348674321516988529342695555618791450954499104025","version":3,"issuer":{"country":["DE"],"email_address":["docker@createyourown.domain"],"province":["BY"],"organization":["Dorfwirt"],"locality":["Hintertupfing"],"common_name":["www.createyourown.domain"],"organizational_unit":["Theke"]},"tbs_noct_fingerprint":"d1b8cdcee4b10a1bc1e6a252dc9581aafab3bb8c690092f38aa210a83743b5d7","fingerprint_sha256":"c7f155585ae145e1f0a64c92c42366d341e1d87672d9f218fd7c0c6779d57ef9","tbs_fingerprint":"d1b8cdcee4b10a1bc1e6a252dc9581aafab3bb8c690092f38aa210a83743b5d7","extensions":{"subject_key_id":"194c5a053f7a0ae6bc4474f6c114df42e7b6700d","authority_key_id":"194c5a053f7a0ae6bc4474f6c114df42e7b6700d","basic_constraints":{"is_ca":true}},"subject_dn":"emailAddress=docker@createyourown.domain, C=DE, ST=BY, L=Hintertupfing, O=Dorfwirt, OU=Theke, CN=www.createyourown.domain, emailAddress=docker@createyourown.domain","names":["www.createyourown.domain"],"fingerprint_sha1":"0e6abd7a593eb3e26000e136c44e76a066f7bed5","spki_subject_fingerprint":"a037ec735a42bec992199bcbb63aa0fdf76163df44ce0a1ef3d87021ba8cef03","validity":{"length":2592000,"start":"2026-08-17T03:42:44Z","end":"2026-09-16T03:42:44Z"},"validation_level":"unknown"},"uri":"https://187.209.130.27:8333/","host_type":"ip","target":{"ip":"187.209.130.27","type":"ip"},"prot7":"http","geo":{"continent":"North America","country":"MX","city":"Saltillo","tz":"America/Monterrey","accuracy":10,"location":{"lon":-101.1189,"lat":25.214},"postal":"25210","registered_country":"MX","subdivisions":["Coahuila"]},"path":"/","prot4":"tcp","protocol":"https","@timestamp":"2026-08-19T03:50:11.416Z","cve":[{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Impact: The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() ...","published":"2026-03-31T20:16:29.660","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-4800","match_type":"product","confidentiality_impact":"HIGH","match_product":"Lodash"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"LOW","description":"Impact: Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the _.unset and _.omit functions. The fix for (CVE-2025-13465: https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg) only guards against string key ...","published":"2026-03-31T20:16:26.207","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-2950","match_type":"product","confidentiality_impact":"NONE","match_product":"Lodash"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.9","integrity_impact":"LOW","has_exploit":true,"description":"Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties ...","published":"2026-01-21T20:16:05.250","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2025-13465","match_type":"product","confidentiality_impact":"NONE","match_product":"Lodash","exploit_links":["https://github.com/jaytarr-geo/nextjs-lodash-cve-2025-13465-repro"]},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large ...","published":"2024-02-10T05:15:08.650","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-21490","match_type":"product","confidentiality_impact":"NONE","match_product":"AngularJS","exploit_links":["https://github.com/RoninForge/roninforge-angularjs-migration"]}],"port":8333,"whois":{"related_nets":[],"net":{"country":"MX","address":"AVENIDA (AV.) INSURGENTES SUR, 3500, PISO 4 PEA POBRE\n14060 - TLALPAN - CX","created":"20111014","start_ip":"187.208.0.0","description":"UNINET","range":"187.208.0.0 - 187.208.255.255","cidr":["187.208.0.0/16"],"net_size":65535,"handle":"GEC10","updated":"20211008","end_ip":"187.208.255.255","contacts":{"emails":["gccips@uninet.com.mx"],"persons":["Santiago Ricardo Ramirez Luna"]}},"asn":{"country":"MX","number":["8151"],"registry":"lacnic","name":"AS8151 - UNINET","cidr":"187.208.0.0/21","updated":"2011-06-06"}},"host":"187.209.130.27","http":{"headers":{"date":["Wed, 19 Aug 2026 03:47:47 GMT"],"server":["nginx/1.31.3"],"accept_ranges":["bytes"],"content_type":["text/html"],"cache_control":["no-cache"],"etag":["W/\"2811-1750116156000\""],"connection":["keep-alive"],"last_modified":["Mon, 16 Jun 2025 23:22:36 GMT"],"content_length":["2811"],"pragma":["no-cache"]},"status_code":200,"body_sha256":"171174bf7539cd5052d81d51911c4a3211c4fb73b164692b09e275312733606e","meta":["http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"","http-equiv=\"x-ua-compatible\" content=\"IE=edge\"","name=\"viewport\" content=\"width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no,target-densitydpi=medium-dpi\"","name=\"mobile-web-app-capable\" content=\"yes\"","name=\"apple-mobile-web-app-capable\" content=\"yes\"","name=\"build\" content=\"20250616232146\""],"body":"

    ","status_line":"200 ","version":"1.1","content_length":2811},"tag":[{"name":"jquery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","cpe":["cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*"],"fullname":"jQuery","category":["JavaScript libraries"],"jquery":{"version":""}},{"lodash":{"version":""},"name":"lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","cpe":["cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*"],"fullname":"Lodash","category":["JavaScript libraries"]},{"nginx":{"version":"1.31.3"},"name":"nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","cpe":["cpe:2.3:a:f5:nginx:1.31.3:*:*:*:*:*:*:*"],"fullname":"Nginx","category":["Web servers","Reverse proxies"]},{"name":"angularjs","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","cpe":["cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*"],"fullname":"AngularJS","angularjs":{"version":""},"category":["JavaScript frameworks"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"ip":"190.97.190.13","isp":"Tevisat","certificate":{"issuer_dn":"emailAddress=hostmaster@veeder.com, C=US, ST=Connecticut, L=Simsbury, O=Veeder-Root, CN=tls4.localdomain, emailAddress=hostmaster@veeder.com","fingerprint_md5":"bf61e4a717d27633c1b905f189d9f79a","signature":{"valid":true,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"dN6AnkxQwH6EPL0CWM++z7g3WefMILgM/+GlP9qxpXIxszPST5NRjFz3gO52iauZfVqYsOiKJ0/ebzx0ep1KpLXSpbAxLF53EdI31YjMc/y8C+vYOl3w6prBadYU5xxrGXINbFeHnijuz/gyB4ch+MtMTbqqvhdpIO7az3Zscqfk8Dj6e5u0H96foPtpIF5iuTROiPvZZuhk2qYoBJPf1NqcCIY13dsepaWjqmpo99pw4wxQ/plsp5qKIgDjHyhYER0kSDIbFCK1fQmTq0jHmy9bCGrW2DlTu72IJXl247L1NiQ2Ek5KsCQOSb0ZD2pJwymh+ExOxjHoWKA7JcGY3Q==","self_signed":true},"src":"https://190.97.190.13:8333/","redacted":false,"subject":{"country":["US"],"email_address":["hostmaster@veeder.com"],"province":["Connecticut"],"organization":["Veeder-Root"],"locality":["Simsbury"],"common_name":["tls4.localdomain"]},"serial_number":"16154111272857918705","version":1,"issuer":{"country":["US"],"email_address":["hostmaster@veeder.com"],"province":["Connecticut"],"organization":["Veeder-Root"],"locality":["Simsbury"],"common_name":["tls4.localdomain"]},"tbs_noct_fingerprint":"370b4a687b1af1808c888ca98692ffb07a1202a8a692639baa3d7ab949e1d2bc","fingerprint_sha256":"34698db9473a27552a48991cf08385949df5ffc1f2e05416222780c9e29d5474","extensions":{},"tbs_fingerprint":"e141b5dd5491be3cd70e75bec67f10474cb98ad97182a05e72794dfb34bcdf4a","names":["tls4.localdomain"],"subject_dn":"emailAddress=hostmaster@veeder.com, C=US, ST=Connecticut, L=Simsbury, O=Veeder-Root, CN=tls4.localdomain, emailAddress=hostmaster@veeder.com","fingerprint_sha1":"ac479d9614b1eaf06f42f72a262a94d16d18956a","spki_subject_fingerprint":"c12b53b5152a086b18785ed587c0e418ebb57fc6e1da19eca7345e91cc3e5acc","validity":{"start":"2017-02-27T16:06:24Z","length":631152000,"end":"2037-02-27T16:06:24Z"},"validation_level":"unknown"},"uri":"https://190.97.190.13:8333/","host_type":"ip","target":{"ip":"190.97.190.13","type":"ip"},"prot7":"http","geo":{"continent":"North America","country":"HN","city":"La Ceiba","tz":"America/Tegucigalpa","accuracy":20,"location":{"lon":-86.784,"lat":15.761},"registered_country":"HN","subdivisions":["Atlántida Department"]},"path":"/","prot4":"tcp","protocol":"https","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server\"s mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.","published":"2026-06-08T16:16:44.223","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-49975","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-","https://github.com/mrx-arafat/CVE-2026-49975-POC","https://github.com/obrige/http2-bomb","https://github.com/renzi25031469/CVE-2026-49975-HTTP-2-Bomb","https://github.com/EQSTLab/CVE-2026-49975","https://github.com/LSG-PolarBear/CVE-2026-49975","https://github.com/LiaoZiqi-GZFLS/CVE-2026-49975","https://github.com/minc-nice-100/http2-bomb-analysis-paper","https://github.com/razureink/cve-2026-49975-http2bomb_reproduction","https://github.com/0xc03307b/CVE-2026-49975","https://github.com/wlor0623/http2-bomb-detector"],"match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.","published":"2026-06-08T16:16:43.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-48913","match_type":"product","confidentiality_impact":"LOW","match_product":"Apache HTTP Server"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:40.583","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-44631","match_type":"product","confidentiality_impact":"HIGH","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Loop with Unreachable Exit Condition (\"Infinite Loop\") vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to ...","published":"2026-06-08T16:16:40.453","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44186","match_type":"product","confidentiality_impact":"LOW","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:40.327","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44185","match_type":"product","confidentiality_impact":"LOW","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:39.263","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42536","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which ...","published":"2026-06-08T16:16:39.127","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42535","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes ...","published":"2026-06-08T16:16:38.537","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34356","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.","published":"2026-06-08T16:16:38.387","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34355","match_type":"product","confidentiality_impact":"NONE","match_product":"Apache HTTP Server"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:37.967","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-29167","match_type":"product","confidentiality_impact":"HIGH","match_product":"Apache HTTP Server"}],"@timestamp":"2026-08-19T02:02:32.106Z","port":8333,"host":"190.97.190.13","http":{"headers":{"date":["Tue, 18 Aug 2026 22:19:38 GMT"],"server":["Apache"],"accept_ranges":["bytes"],"content_type":["text/html"],"last_modified":["Fri, 03 Nov 2017 04:37:57 GMT"],"content_length":["1145"]},"status_code":200,"body_sha256":"bfdb2764b8edb4541e724a1ca1f61920307bbc5c07ee30163919d98e1d859508","meta":["name='gwt:property' content='locale=en'","http-equiv=\"Tls 450 \" content=\"text/html; charset=UTF-8\"","http-equiv=\"X-UA-Compatible\" content=\"IE=9\""],"body":"\r\n\r\n \r\n \r\n \r\n \r\n \r\n\t\r\n\t\r\n \r\n \r\n\r\n TLS Web Interface\r\n \r\n \r\n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n","title":"TLS Web Interface","status_line":"200 OK","version":"1.1","content_length":1145},"tag":[{"name":"apache_http_server","cpe":["cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"],"description":"Apache is a free and open-source cross-platform web server software.","fullname":"Apache HTTP Server","category":["Web servers"],"apache_http_server":{"version":""}},{"apache":{"version":""},"name":"apache","cpe":["cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"],"description":"Apache is a free and open-source cross-platform web server software.","fullname":"Apache","category":["Web servers"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"ip":"183.88.241.175","isp":"3BB Broadband","certificate":{"issuer_dn":"C=US, O=Let's Encrypt, CN=YE2","fingerprint_md5":"54aacfbb700dff72ad5521af522e253e","chain":[{"issuer_dn":"C=US, O=ISRG, CN=Root YE","fingerprint_md5":"595b3200e58e2d2f9828c87eb771b260","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGYCMQDIcnw5dcZLN9ffynXnnkLD/itSJEycJPb3sRkzeqBowup7vOsAwaqoCnNn/jh9wycCMQCJM6CPlaOC4pQYYbJtVPYbDKrIb2EKk5NpOpE6/XttQYZV/3gilB9l+Cc/DOVwmyg=","self_signed":false},"subject":{"country":["US"],"organization":["Let's Encrypt"],"common_name":["YE2"]},"serial_number":"103615881233243919450438579527522644245","version":3,"issuer":{"country":["US"],"organization":["ISRG"],"common_name":["Root YE"]},"tbs_noct_fingerprint":"df469a3e99fac188ea4807182b89fb621b43b315d63b2b1159e09329889b09bb","fingerprint_sha256":"97658de8c68dfa98ace1e5028a63d54a1aae911b3e21471076c6850cd08cbab4","tbs_fingerprint":"df469a3e99fac188ea4807182b89fb621b43b315d63b2b1159e09329889b09bb","extensions":{"crl_distribution_points":["http://ye.c.lencr.org/"],"subject_key_id":"b959f28ecf22f086d33748ff761418ba82d85587","certificate_policies":[{"id":"2.23.140.1.2.1"}],"authority_key_id":"a3c8265a8ea14cd03563fc9b23c83aae56f34f56","key_usage":{"digital_signature":true,"certificate_sign":true,"crl_sign":true,"value":97},"authority_info_access":{"issuer_urls":["http://ye.i.lencr.org/"]},"basic_constraints":{"max_path_len":0,"is_ca":true},"extended_key_usage":{"server_auth":true}},"subject_dn":"C=US, O=Let's Encrypt, CN=YE2","fingerprint_sha1":"f8158ca8a3a7c5dbd7842218f5d949cec83acdba","spki_subject_fingerprint":"b5878c28299e5cf0a87aca902f503d5a3b42fbe25cc130ce92727ca03ae05c9f","validity":{"length":94694399,"start":"2025-09-03T00:00:00Z","end":"2028-09-02T23:59:59Z"},"validation_level":"DV"},{"issuer_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X2","fingerprint_md5":"cddedecf5a284a1b68b3b6bd50052659","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGYCMQDFNfVgrZsVTQ/FBwWUaJmuPWe4z7OuA5mtHk7tTgoVWwf9iexld572CgMeeLpNRvUCMQDtJoi1SbvDyzYl115IhP4LCtwk0Uxf2nqOGzF+NmcONHLEVOgAtuoUltfyFmmrOnY=","self_signed":false},"subject":{"country":["US"],"organization":["ISRG"],"common_name":["Root YE"]},"serial_number":"179619193732476545641173103431506703674","version":3,"issuer":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X2"]},"tbs_noct_fingerprint":"369d1cf858e309c02aa2824c3763e12c05975e03291bff2bb462567bcbe93f21","fingerprint_sha256":"0fc0901cca2bae9e9fdbb02d50d02f1094f7b36672086991b9e897626dc485f0","tbs_fingerprint":"369d1cf858e309c02aa2824c3763e12c05975e03291bff2bb462567bcbe93f21","extensions":{"crl_distribution_points":["http://x2.c.lencr.org/"],"subject_key_id":"a3c8265a8ea14cd03563fc9b23c83aae56f34f56","certificate_policies":[{"id":"2.23.140.1.2.1"}],"authority_key_id":"7c4296aede4b483bfa92f89e8ccf6d8ba9723795","key_usage":{"certificate_sign":true,"crl_sign":true,"value":96},"authority_info_access":{"issuer_urls":["http://x2.i.lencr.org/"]},"basic_constraints":{"is_ca":true},"extended_key_usage":{"server_auth":true}},"subject_dn":"C=US, O=ISRG, CN=Root YE","fingerprint_sha1":"f37620fc4b1cddd2a3d74b1d5e8db42e244ca006","spki_subject_fingerprint":"06d2b2f7d6dd24ec3fb81bf4825876669dde75f6e14cc0d00904ffeb4f10985d","validity":{"length":199151999,"start":"2026-05-13T00:00:00Z","end":"2032-09-02T23:59:59Z"},"validation_level":"DV"},{"issuer_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X1","fingerprint_md5":"5292fa0079c5afae289c2d2141236e04","redacted":false,"signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"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","self_signed":false},"subject":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X2"]},"serial_number":"144299725964134815114551462777128548813","version":3,"issuer":{"country":["US"],"organization":["Internet Security Research Group"],"common_name":["ISRG Root X1"]},"tbs_noct_fingerprint":"8c5033973ffe4ff1ef0aa92984fc93281ba7a9278ef8bf641226b898d10d4e74","fingerprint_sha256":"ee5f7abd6981bb0255632cd8f49283451b4b18844d12040b44ee00f07b8fe2c6","tbs_fingerprint":"8c5033973ffe4ff1ef0aa92984fc93281ba7a9278ef8bf641226b898d10d4e74","extensions":{"crl_distribution_points":["http://x1.c.lencr.org/"],"subject_key_id":"7c4296aede4b483bfa92f89e8ccf6d8ba9723795","certificate_policies":[{"id":"2.23.140.1.2.1"}],"authority_key_id":"79b459e67bb6e5e40173800888c81a58f6e99b6e","key_usage":{"certificate_sign":true,"crl_sign":true,"value":96},"authority_info_access":{"issuer_urls":["http://x1.i.lencr.org/"]},"basic_constraints":{"is_ca":true},"extended_key_usage":{"client_auth":true,"server_auth":true}},"subject_dn":"C=US, O=Internet Security Research Group, CN=ISRG Root X2","fingerprint_sha1":"3c34e356c7fc17f5acf04824bc587c6c623951a2","spki_subject_fingerprint":"2223f064e46b9faf6802d8d75d2d2503c538a19c20c42c0910cef935dac1ac47","validity":{"length":199151999,"start":"2026-05-13T00:00:00Z","end":"2032-09-02T23:59:59Z"},"validation_level":"DV"}],"redacted":false,"src":"https://183.88.241.175:8333/","signature":{"valid":false,"signature_algorithm":{"name":"ECDSA-SHA384","oid":"1.2.840.10045.4.3.3"},"value":"MGQCMCKd1sysHBeMHA2je8NQvutL3xS3QSfISuAHwMiL5ha9aGuV9nhtBgrZsXE9l5fm0gIwaOaY2f6AOGR/mkaMhwOckSRn51/szGeJaFF+LS2sIIEAM2j3n5jjOKTVrP4h6vOe","self_signed":false},"subject":{"common_name":["uwellnesscenter.synology.me"]},"serial_number":"495186633477851316057087165655328896191312","version":3,"issuer":{"country":["US"],"organization":["Let's Encrypt"],"common_name":["YE2"]},"tbs_noct_fingerprint":"6ea347bd6117650c54c010259a582933383f10e1445ad36474caa922865fc6b6","fingerprint_sha256":"0cb4b313ae9b8b25838a82e3b803bfcd949f11c1d7a9864fe91195dc1b12bbf1","tbs_fingerprint":"f3155b466379b68310abf2e62db06d845d526ea29ba1de5c3d3e70c335ccb457","extensions":{"crl_distribution_points":["http://ye2.c.lencr.org/81.crl"],"subject_key_id":"c1840d9363d24fd8c2754f6ec94e93c554d28109","certificate_policies":[{"id":"2.23.140.1.2.1"}],"authority_key_id":"b959f28ecf22f086d33748ff761418ba82d85587","key_usage":{"digital_signature":true,"value":1},"subject_alt_name":{"dns_names":["*.uwellnesscenter.synology.me","uwellnesscenter.synology.me"]},"signed_certificate_timestamps":[{"log_id":"1219ENGn9XfCx+lf1wC/+YLJM1pl4dCzAXMXwMjFaXc=","signature":"BAMARjBEAiBQD2Mbjj/K/x5EojclgFDxGhWh307bHp85qp1RdvKTHQIge4brHw4zGRKzTuSx3xtvY2kNTl0AWV+iY//JoFzkqhM=","version":0,"timestamp":1782956235},{"log_id":"Rq+GPTs+5Z+ld96oJF02sNntIqIj9GF3QSKUUu6VUF8=","extensions":"AAAFAAtkqvk=","signature":"BAMASDBGAiEAzzuA1irbYZZCHblS+gNY0ve2Txl+iIqJIZAw2x3qHaYCIQDxURuO0Z12MA3yXgYc3qy145KKNUuGiYG7sul5+eH77A==","version":0,"timestamp":1782956235}],"authority_info_access":{"issuer_urls":["http://ye2.i.lencr.org/"]},"basic_constraints":{"is_ca":false},"extended_key_usage":{"server_auth":true}},"subject_dn":"CN=uwellnesscenter.synology.me","names":["*.uwellnesscenter.synology.me","uwellnesscenter.synology.me"],"fingerprint_sha1":"2a343d34893b8e848b1d3bbef26c53bbad86a5bb","spki_subject_fingerprint":"6492b92cbc5e546122b510690b7ea62cba1b298a4762dd706a8ac5f1f6519ec5","validity":{"length":7775999,"start":"2026-07-02T00:38:45Z","end":"2026-09-30T00:38:44Z"},"validation_level":"DV"},"uri":"https://183.88.241.175:8333/","host_type":"ip","target":{"ip":"183.88.241.175","type":"ip"},"prot7":"http","geo":{"continent":"Asia","country":"TH","city":"Nakhon Ratchasima","tz":"Asia/Bangkok","accuracy":200,"location":{"lon":102.2215,"lat":15.0598},"postal":"30000","registered_country":"TH","subdivisions":["Nakhon Ratchasima"]},"path":"/","prot4":"tcp","protocol":"https","@timestamp":"2026-08-19T00:52:41.729Z","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","published":"2023-10-10T14:15:10.883","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-44487","match_type":"product","confidentiality_impact":"NONE","match_product":"Nginx","exploit_links":["https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/micrictor/http2-rst-stream","https://security.netapp.com/advisory/ntap-20240621-0006/","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/Appsynergy-io/CVE-2023-44487","https://github.com/ByteHackr/CVE-2023-44487","https://github.com/pabloec20/rapidreset","https://github.com/secengjeff/rapidresetclient","https://github.com/studiogangster/CVE-2023-44487","https://github.com/ReToCode/golang-CVE-2023-44487","https://github.com/ndrscodes/http2-rst-stream-attacker","https://github.com/nxenon/cve-2023-44487","https://github.com/sigridou/CVE-2023-44487-","https://github.com/TYuan0816/cve-2023-44487","https://github.com/sn130hk/CVE-2023-44487","https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC","https://github.com/aulauniversal/CVE-2023-44487","https://github.com/BMG-Black-Magic/CVE-2023-44487","https://github.com/moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack","https://github.com/zanks08/cve-2023-44487-demo","https://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Reset","https://github.com/tpirate/cve-2023-44487-POC","https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos","https://github.com/sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-","https://github.com/TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab","https://github.com/Hirokiii/CVE-2023-44487","https://github.com/madhantr0/http2-security-lab","https://github.com/tahaXafous/CVE-2023-44487-dos","https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit"]},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","has_exploit":true,"description":"When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets ...","published":"2025-02-05T18:15:33.347","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-23419","match_type":"product","confidentiality_impact":"LOW","match_product":"Nginx","exploit_links":["https://github.com/harley-ghostie/safe-check-CVE-2025-23419","https://github.com/xitexploiter96-dot/CVE-2025-23419"]}],"port":8333,"whois":{"abuse":"ipadmin3bb@ais.co.th","related_nets":[{"start_ip":"183.88.0.0","description":"Triple T Broadband Public Company Limited\n 89 , Cosmo Office Park Building , Popular Road\n Ban Mai Subdistrict ,","range":"183.88.0.0 - 183.88.3.255","cidr":["183.88.0.0/22"],"net_size":1023,"updated":"2026-02-20T04:15:21Z","end_ip":"183.88.3.255"}],"net":{"country":"TH","address":"89 , Cosmo Office Park Building , Popular Road Ban Mai Subdistrict , Pakkret 11120","start_ip":"183.88.0.0","name":"TTBP-TH","description":"Triple T Broadband Public Company Limited","range":"183.88.0.0 - 183.88.255.255","cidr":["183.88.0.0/16"],"net_size":65535,"handle":"AT1597-AP","updated":"2026-04-30T06:40:43Z","end_ip":"183.88.255.255","contacts":{"emails":["ipadmin3bb@ais.co.th","wanchati@ais.co.th"],"persons":["Triple T Broadband PCL administrator"],"phones":["+000000000","+6621008552"]}},"asn":{"country":"TH","number":["138524"],"registry":"apnic","name":"TTBP-AS-AP - Triple T Broadband Public Company Limited","cidr":"183.88.0.0/22","updated":"2009-11-13"}},"host":"183.88.241.175","http":{"headers":{"date":["Wed, 19 Aug 2026 00:50:22 GMT"],"server":["nginx"],"content_type":["text/html"],"etag":["\"66b59785-dee\""],"connection":["keep-alive"],"keep_alive":["timeout=20"],"content_length":["3566"]},"status_code":403,"body_sha256":"705e2bbf46a55e0ed8385197b99b12bf38783d3fee0c5b53219444cf197a5e0a","meta":["charset=\"utf-8\""],"body":"\n\n\n\n\n\n\n
    \n
    \n
    \n
    403
    \n
    \n
    \n

    \n
    \n\n
    \n
    \n\n\n","status_line":"403 Forbidden","version":"1.1","content_length":3566},"tag":[{"nginx":{"version":""},"name":"nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","cpe":["cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"],"fullname":"Nginx","category":["Web servers","Reverse proxies"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"isp":"China Telecom","ip":"183.66.171.22","certificate":{"issuer_dn":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1","fingerprint_md5":"bde318806a27fc6fc5d0973b26846d84","chain":[{"issuer_dn":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2","fingerprint_md5":"98eb0b62c3fe53eac8caa8fdb58020ee","signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"GUSlOb4K3WtmSlbmE50UYBHXM0SKXPqHMzk6XQUpCheF/4qU8aOhajsyRQFDV1ih/uPIg7YHRtFiCTq4G+zb43X1T77nJgSOI9pq/TqCwtukZ7u9VLL3JAq3Wdy2moKLvvC8tVmRzkAe0xQCkRKIjbBG80MSyDX/R4uYgj6ZiNT/Zg6GI6RofgqgpDdssLc0XIRQEotxIZcKzP3pGJ9FCbMHmMLLyuBd+uCWvVcF2ogYAawufChS/PT61D9rqzPRS5I2uqa3tmIT44JhJgWhBnFMb7AGQkvNq9KNS9dd3GWc17H/dXa1enoxzWjE0hBdFjxPhUb0W3wi8o34/m8Fxw==","self_signed":false},"redacted":false,"subject":{"country":["US"],"organization":["DigiCert Inc"],"common_name":["RapidSSL TLS RSA CA G1"],"organizational_unit":["www.digicert.com"]},"serial_number":"14816627491795588044059060260691382010","version":3,"issuer":{"country":["US"],"organization":["DigiCert Inc"],"common_name":["DigiCert Global Root G2"],"organizational_unit":["www.digicert.com"]},"tbs_noct_fingerprint":"b4e0a8c98b0aae43b7383037accd11a1c964971f6b74fcbc370cd030fb328ddd","fingerprint_sha256":"4422e963ee53cd58cc9f85cd40bf5ffec0095fdf1a154535661c1c06bcadc69b","extensions":{"crl_distribution_points":["http://crl3.digicert.com/DigiCertGlobalRootG2.crl"],"subject_key_id":"0cdb6c82490f4a670ab814ee7ac4485288eb5638","certificate_policies":[{"cps":["https://www.digicert.com/CPS"],"id":"2.16.840.1.114412.1.1"},{"id":"2.16.840.1.114412.1.2"},{"id":"2.23.140.1.2.1"},{"id":"2.23.140.1.2.2"}],"key_usage":{"digital_signature":true,"certificate_sign":true,"crl_sign":true,"value":97},"authority_key_id":"4e2254201895e6e36ee60ffafab912ed06178f39","authority_info_access":{"ocsp_urls":["http://ocsp.digicert.com"]},"basic_constraints":{"max_path_len":0,"is_ca":true},"extended_key_usage":{"client_auth":true,"server_auth":true}},"tbs_fingerprint":"b4e0a8c98b0aae43b7383037accd11a1c964971f6b74fcbc370cd030fb328ddd","subject_dn":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1","fingerprint_sha1":"cbfe9eb43b3b37fe0dfbc4c2eb2d4e07d08bd8e8","spki_subject_fingerprint":"e306d76bf8ba45097907f1cf94397b3dc23345f00601c75528428496621589dd","validity":{"length":315532800,"start":"2017-11-02T12:24:33Z","end":"2027-11-02T12:24:33Z"},"validation_level":"OV"},{"issuer_dn":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA","fingerprint_md5":"12f20d88b24bb618214b5a054c6cc9dc","signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"dEGXeM3v5ccFQrR1me6Ex2g3APWcJE5TcFMiHVM3NEjRtDSbn4L90JHPOWqhIAUdSU6L46IOW1aRdPOZCfpnxsfk8UHLmxilz/xw0+hLOHKpym+8Rm+/8i9zRSn53OZru8EMkL1asxFRSVIVJCmR1dKamEM2RcmyABGbHNzXwg3otgxGI5aVjtETYX3TSk9brQG8kcc0JfRttJGP9CVuZWrzC5+0EP74P5FLwr766OkyMUFE7JZ8Ff7ChAMawxrOSaC6VB2dmt2Pjvp6U4trFG+tKASiuO7WQkzszrnPZFRmt/NBhb/WuzyZFReKfqIS1p39G/VkjVYZiZY/IGalug==","self_signed":false},"redacted":false,"subject":{"country":["US"],"organization":["DigiCert Inc"],"common_name":["DigiCert Global Root G2"],"organizational_unit":["www.digicert.com"]},"serial_number":"21102522142526635661076456618353799272","version":3,"issuer":{"country":["US"],"organization":["DigiCert Inc"],"common_name":["DigiCert Global Root CA"],"organizational_unit":["www.digicert.com"]},"tbs_noct_fingerprint":"bb3f2470ef4b78939f88e22f290c83f99b0169ed3d1c6327d68049811fe63ac8","fingerprint_sha256":"79d57b15dfa65c2870eafe11b637765909cfe937b49c15ce7f194030cab395ad","extensions":{"crl_distribution_points":["http://crl.digicert.cn/DigiCertGlobalRootCA.crl"],"subject_key_id":"4e2254201895e6e36ee60ffafab912ed06178f39","certificate_policies":[{"id":"2.5.29.32.0"}],"key_usage":{"digital_signature":true,"certificate_sign":true,"crl_sign":true,"value":97},"authority_key_id":"03de503556d14cbb66f0a3e21b1bc397b23dd155","authority_info_access":{"issuer_urls":["http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt"],"ocsp_urls":["http://ocsp.digicert.cn"]},"basic_constraints":{"is_ca":true}},"tbs_fingerprint":"bb3f2470ef4b78939f88e22f290c83f99b0169ed3d1c6327d68049811fe63ac8","subject_dn":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2","fingerprint_sha1":"8bf7f178a745a11bac6ae5b586fc1838eadcb2cf","spki_subject_fingerprint":"c28e180c21b1a1142cfbc72a92e86a08bebddb585bd3b9b8efb247a739592956","validity":{"length":246499199,"start":"2024-01-18T00:00:00Z","end":"2031-11-09T23:59:59Z"},"validation_level":"unknown"}],"signature":{"valid":false,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"rNOY4uBohjjQHXpvlPGwwo7n79vXiFfL64Rt4o0vRYMVPlRJJbZtH900XixIUDqIpWhRpi1Lt4H/1vN09see0+dRV3fcM0j3UD4iPdN+Il2uPVOlSO/BV+Z/xbqLh7fQgArX28ggisNDPKkotdzYDEF77/Q9lgVBg7J/DeraN5pGuEkfDZ2T+6vmFZBU50LekdhpN9bTeIoQ6tmZcvZNNgwRZnVurqorrGAX3H7iDMDL6/g3Uh/0JzlrqFnelb70MK8OWqnJFpWQ3Oxyo+cwD82wVq74ZFx7Q5Eo/TJk3ALpv9MN+WLaPljZlj6SP8fD5Cg1fvNITgqhAv0NWM895g==","self_signed":false},"src":"https://183.66.171.22:8333/","redacted":false,"subject":{"common_name":["ztjtjc.com"]},"serial_number":"20971448207594016928197774170017817293","version":3,"issuer":{"country":["US"],"organization":["DigiCert Inc"],"common_name":["RapidSSL TLS RSA CA G1"],"organizational_unit":["www.digicert.com"]},"tbs_noct_fingerprint":"c4d4acb1af8c09b54730b46eba2516dd26628c6886311ef3ac56e84e53359bad","fingerprint_sha256":"0e16a9cb0e4a46c699203c3723d608849f83ceaba45e2f7df7073212730757c4","extensions":{"crl_distribution_points":["http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl"],"subject_key_id":"fc93a1de9a21817339f8d37422ef328dcfc2c6a5","certificate_policies":[{"cps":["http://www.digicert.com/CPS"],"id":"2.23.140.1.2.1"}],"key_usage":{"digital_signature":true,"key_encipherment":true,"value":5},"authority_key_id":"0cdb6c82490f4a670ab814ee7ac4485288eb5638","subject_alt_name":{"dns_names":["ztjtjc.com","www.ztjtjc.com"]},"signed_certificate_timestamps":[{"log_id":"TGPcmOWcHauI9h6KPd6uj6tEozd7X5uUw/uhnPzBviY=","signature":"BAMARzBFAiA2O2TBVRQILt9v47jXe2wg5aFLKMcCOgfUV0+yicPX7QIhAO9Wh5/MicVQOn/ft+epU4OiaZdlu8JaFaVUuLb+q/5b","version":0,"timestamp":1764917407},{"log_id":"HJ9oLOn68EVpUPgbloqH3dsyENhM5siy44JSSsTPWZ8=","signature":"BAMASDBGAiEAlNbj2Jtl/M0+Un6el5aoA4Yn52g4PYYYqZQM/KP7HC0CIQDQo2AcJN/umxL+hVCqVNcdlelPbz4xFkVvwe2vzCbVxw==","version":0,"timestamp":1764917407},{"log_id":"rKswcGzr7IQx9BPS9JFfER5CJEOx8qaMTzwrO6ceAsM=","signature":"BAMARjBEAiBbNduv6bBsbtBeA6SrGT1yEjAOS1rELBGPUvrJjeZxsQIgB2kKfgx9My3QZyd3o4y5CvDnpmdGqzcIiwKzbaN+Zqg=","version":0,"timestamp":1764917407}],"authority_info_access":{"issuer_urls":["http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt"],"ocsp_urls":["http://status.rapidssl.com"]},"basic_constraints":{"is_ca":false},"extended_key_usage":{"client_auth":true,"server_auth":true}},"tbs_fingerprint":"ee8a95f9695c89d7d1c6a2811652f4d856007d0ac4c492b7cf5a8e99bb329be5","subject_dn":"CN=ztjtjc.com","names":["www.ztjtjc.com","ztjtjc.com"],"fingerprint_sha1":"88bc62b7d062319b1e9d5816b1af55fffa25847b","spki_subject_fingerprint":"a9cf84791551d2ec7662c094291327e1d414169dcd40181b7c7dab948f5fb427","validity":{"length":34127999,"start":"2025-12-05T00:00:00Z","end":"2027-01-03T23:59:59Z"},"validation_level":"DV"},"uri":"https://183.66.171.22:8333/","host_type":"ip","prot7":"http","target":{"ip":"183.66.171.22","type":"ip"},"geo":{"continent":"Asia","country":"CN","tz":"Asia/Shanghai","accuracy":1000,"location":{"lon":113.722,"lat":34.7732},"registered_country":"CN"},"path":"/","protocol":"https","prot4":"tcp","@timestamp":"2026-08-19T00:43:09.080Z","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.","published":"2026-06-26T02:16:52.833","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-48933","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and ...","published":"2026-06-26T02:16:52.723","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-48930","match_type":"product","confidentiality_impact":"HIGH","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and ...","published":"2026-06-26T02:16:52.507","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-48619","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, ...","published":"2026-06-26T02:16:52.273","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-48615","match_type":"product","confidentiality_impact":"HIGH","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js 22** and **Node.js 24**.","published":"2026-06-18T19:16:23.507","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-48937","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths ...","published":"2026-01-20T21:16:05.950","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-21637","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"10.0","integrity_impact":"HIGH","description":"A flaw in Node.js\"s permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is enabled. Even without `--allow-net`, attacker-controlled inputs (such as URLs or socketPath options) can connect to ...","published":"2026-01-20T21:16:05.813","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-21636","match_type":"product","confidentiality_impact":"HIGH","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"We have identified a bug in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on(\"uncaughtException\")`, the process terminates, making the ...","published":"2026-01-20T21:16:04.110","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-59466","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of ...","published":"2026-01-20T21:16:04.010","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-59465","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing ...","published":"2026-01-20T21:16:03.900","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-59464","match_type":"product","confidentiality_impact":"NONE","match_product":"Node.js"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted ...","published":"2026-01-26T20:16:16.773","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-23864","match_type":"product","confidentiality_impact":"NONE","match_product":"React"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe ...","published":"2025-12-12T00:15:46.797","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-67779","match_type":"product","confidentiality_impact":"NONE","match_product":"React"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react- ...","published":"2025-12-11T20:16:00.610","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-55184","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/hans362/CVE-2025-55184-poc","https://github.com/ejpir/CVE-2025-55184","https://github.com/bakhod1r/CVE-2025-55184","https://github.com/cybertechajju/CVE-2025-55184-POC-Expolit","https://github.com/KkHackingLearning/CVE-2025-55184_Testing","https://github.com/KingHacker353/CVE-2025-55184","https://github.com/Tarekhshaikh13/CVE-2025-55184","https://github.com/shubham-01-star/OpsGuard-simulation","https://github.com/JSH-data/CVE-2025-55184_CVE-2025-67779"],"match_product":"React"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"10.0","integrity_impact":"HIGH","has_exploit":true,"description":"A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. ...","published":"2025-12-03T16:15:56.463","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-55182","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/mayank729/CVE-2025-55182-scanner","https://github.com/pitufo1721/CVE-2025-55182-GodzillaMemoryShell","https://github.com/alyaapm/CVE-2025-55182-shellinteractive","https://github.com/Mayca369/CVE-2025-55182","https://github.com/BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js","https://github.com/ejpir/CVE-2025-55182-research","https://github.com/sickwell/CVE-2025-55182","https://github.com/fatguru/CVE-2025-55182-scanner","https://github.com/atastycookie/CVE-2025-55182","https://github.com/santihabib/CVE-2025-55182-analysis","https://github.com/xkillbit/cve-2025-55182-scanner","https://github.com/whiteov3rflow/CVE-2025-55182-poc","https://github.com/shen771/Blackash-CVE-2025-55182","https://github.com/Pa2sw0rd/exploit-CVE-2025-55182-poc","https://github.com/heiheishushu/rsc_detect_CVE-2025-55182","https://github.com/songsanggggg/CVE-2025-55182","https://github.com/M0onPu15e/next.js-scanner","https://github.com/ducducuc111/CVE-2025-55182-poc","https://github.com/ThemeHackers/CVE-2025-55182","https://github.com/joshterrill/CVE-2025-55182-realistic-poc","https://github.com/mingyisecurity-lab/CVE-2025-55182-TOOLS","https://github.com/gensecaihq/react2shell-scanner","https://github.com/sudo-Yangziran/CVE-2025-55182POC","https://github.com/Rsatan/Next.js-Exploit-Tool","https://github.com/assetnote/react2shell-scanner","https://github.com/jf0x3a/CVE-2025-55182-exploit","https://github.com/harness-security-labs/CVE-2025-55182-checker","https://github.com/dissy123/cve-2025-55182","https://github.com/dwisiswant0/CVE-2025-55182","https://github.com/Chelsea486MHz/CVE-2025-55182-test","https://github.com/oways/React2shell-CVE-2025-55182-checker","https://github.com/msanft/CVE-2025-55182","https://github.com/ivaavimusic/React19-fix-vibecoders","https://github.com/carlosaruy/CVE-2025-55182","https://github.com/Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478","https://github.com/c0rydoras/CVE-2025-55182","https://github.com/CymulateResearch/React2Shell-Scanner","https://github.com/0xPThree/cve-2025-55182","https://github.com/acheong08/CVE-2025-55182-poc","https://github.com/jctommasi/react2shellVulnApp","https://github.com/shamo0/react2shell-PoC","https://github.com/EynaExp/CVE-2025-55182-POC","https://github.com/im-hanzou/CVE-2025-55182-POC-SCANNER","https://github.com/klassiker/CVE-2025-55182","https://github.com/Emiyelbarto/CVE-2025-55182-PoC","https://github.com/MrR0b0t19/CVE-2025-55182-shellinteractive","https://github.com/ps-interactive/cve-2025-55182","https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension","https://github.com/aquinn-r7/CVE-2025-55182-VulnCheckPOC","https://github.com/MedusaSH/POC-CVE-2025-55182","https://github.com/nxgn-kd01/react2shell-scanner","https://github.com/clevernyyyy/CVE-2025-55182-Dockerized","https://github.com/Cillian-Collins/CVE-2025-55182","https://github.com/ZihxS/check-react-rce-cve-2025-55182","https://github.com/ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner","https://github.com/sherlocksecurity/CVE-2025-55182-Exploit-scanner","https://github.com/huangzccn/CVE-2025-55182","https://github.com/Darker-Ink/react-ssr-vulnerability","https://github.com/emadshanab/POC-for-CVE-2025-55182","https://github.com/topstar88/CVE-2025-55182","https://github.com/selectarget/CVE-2025-55182-Exploit","https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool","https://github.com/Chocapikk/CVE-2025-55182","https://github.com/mrknow001/RSC_Detector","https://github.com/Spritualkb/CVE-2025-55182-exp","https://github.com/younesZdDz/CVE-2025-55182","https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc","https://github.com/hualy13/CVE-2025-55182","https://github.com/RuoJi6/CVE-2025-55182-RCE-shell","https://github.com/Saturate/CVE-2025-55182-react2shell","https://github.com/hoosin/CVE-2025-55182","https://github.com/Pizz33/CVE-2025-55182-burpscanner","https://github.com/Y3B3L4Y3/CVE-2025-55182-test","https://github.com/ngvcanh/CVE-2025-55182-Attack-Analysis","https://github.com/aliclub0x00/CVE-2025-55182-POC-NEXTJS","https://github.com/logesh-GIT001/CVE-2025-55182","https://github.com/freeqaz/react2shell","https://github.com/ABCFabian/React2Shell-CVE-2025-55182-Testing-Environment","https://github.com/l4rm4nd/CVE-2025-55182","https://github.com/Airis101/CVE-2025-55182-analysis","https://github.com/GelukCrab/React-Server-Components-RCE","https://github.com/Golden-Secure/CVE-2025-55182","https://github.com/grp-ops/react2shell","https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab","https://github.com/Rat5ak/CVE-2025-55182-React2Shell-RCE-POC","https://github.com/imbas007/POC-CVE-2025-55182","https://github.com/RajChowdhury240/React2Shell-CVE-2025-55182","https://github.com/nehkark/CVE-2025-55182","https://github.com/prestonhashworth/cve-2025-55182","https://github.com/nomorebreach/POC-CVE-2025-55182","https://github.com/nerium-security/CVE-2025-55182","https://github.com/zzhorc/CVE-2025-55182","https://github.com/Atlantis02-sec/Vulnerability-assessment","https://github.com/rl0x01/CVE-2025-55182_PoC","https://github.com/subzer0x0/React2Shell","https://github.com/f0xyx/CVE-2025-55182-Scanner","https://github.com/Cr4at0r/Next.js-RCE-Scanner-BurpSuite-Extension-","https://github.com/ceortiz33/CVE-2025-55182","https://github.com/xkey8/react2shell","https://github.com/zessu/CVE-2025-55182-Typescript","https://github.com/mxm0z/r2s","https://github.com/NathanJ60/react2shell-interactive","https://github.com/GarethMSheldon/React2Shell-CVE-2025-55182-Detector","https://github.com/kindone09/CVE-2025-55182","https://github.com/alsaut1/react2shell-lab","https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script","https://github.com/kOaDT/poc-cve-2025-55182","https://github.com/mohit121312/CVE-2025-55182_full_exploit","https://github.com/ejpir/CVE-2025-55182-bypass","https://github.com/StealthMoud/CVE-2025-55182-Scanner","https://github.com/yanoshercohen/React2Shell_CVE-2025-55182","https://github.com/emredavut/CVE-2025-55182","https://github.com/rapticore/ore_react2shell_scanner","https://github.com/fankh/cve-2025-55182-test-lab-windows","https://github.com/cypholab/evilact","https://github.com/greenheadHQ/CVE-2025-55182","https://github.com/sumanrox/rschunter","https://github.com/I3r1h0n/React2Shell","https://github.com/zorejt/Rust_CVE-2025-55182","https://github.com/Archerkong/CVE-2025-55182","https://github.com/philparzer/nextjs-react2shell-detect","https://github.com/yunaranyancat/CVE-2025-55182-NSE","https://github.com/MrSol0/CVE-2025-55182-Terminal","https://github.com/fullhunt/react2shell-test-server","https://github.com/zack0x01/vuln-app-CVE-2025-55182","https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-","https://github.com/rocklambros/React2Shell_Hunter","https://github.com/alessiodos/react2shell-scanner","https://github.com/Bashamega/react-CVE-2025-55182-fixer","https://github.com/orgito1015/CVE-2025-55182-RCE-Exploit","https://github.com/keklick1337/CVE-2025-55182-golang-PoC","https://github.com/rubensuxo-eh/react2shell-exploit","https://github.com/CirqueiraDev/MassExploit-CVE-2025-55182","https://github.com/aastikgakhar/CVE-2025-55182-react2shell","https://github.com/zamdevio/r2s","https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web","https://github.com/0xN7y/CVE-2025-55182","https://github.com/MuhammadWaseem29/React2Shell_Rce-cve-2025-55182","https://github.com/l0n3m4n/CVE-2025-55182-Waf","https://github.com/ynsmroztas/NextRce","https://github.com/shreyas-malhotra/React2Shell-CVE-2025-55182","https://github.com/sohaibeb/CVE-2025-55182","https://github.com/vyvivekyadav04/RSC-Infra-Scanner","https://github.com/MikeTheHash/CVE-2025-55182","https://github.com/Qixinlee/CVE-2025-55182-Scanner","https://github.com/DelvyGonzalez/react2shell-security-toolkit","https://github.com/jumodada/react-cve-2025-55182-demo","https://github.com/ahmedshamsddin/CVE-2025-55182","https://github.com/LemonTeatw1/CVE-2025-55182-exploit","https://github.com/ethicalrohitt/React2Shell_cve-2025-55182","https://github.com/ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-Shell","https://github.com/shakilkhatri/scanner-for-CVE-2025-55182-vulnerability","https://github.com/UmmItKin/CVE-2025-55182-PoC","https://github.com/robbin0919/CVE-2025-55182","https://github.com/zxz3650/CVE-2025-55182-POC","https://github.com/AliHzSec/CVE-2025-55182","https://github.com/zr0n/react2shell","https://github.com/hunter24x24/CVE-2025-55182-mass","https://github.com/andressuarezmonk/CVE-2025-55182","https://github.com/cybertechajju/R2C-CVE-2025-55182-66478","https://github.com/Dh4v4l8/CVE-2025-55182-poc-tool","https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell","https://github.com/SainiONHacks/CVE-2025-55182-Scanner","https://github.com/umairahmadh/react-vuln-scanner","https://github.com/ToritoIO/Torito-R2S","https://github.com/surajhacx/react2shellpoc","https://github.com/kavienanj/CVE-2025-55182","https://github.com/websecuritylabs/React2Shell-Library","https://github.com/cyberleelawat/CVE-2025-55182","https://github.com/satriarizka/CVE-2025-55182-Simple-Scanner","https://github.com/xcanwin/CVE-2025-55182-React-RCE","https://github.com/DoobTheGoober/CVE-2025-55182-Test-Server","https://github.com/timsonner/React2Shell-CVE-2025-55182","https://github.com/theman001/CVE-2025-55182","https://github.com/lalaterry/CVE-2025-55182-React2Shell-lab","https://github.com/arashiyans/CVE-2025-55182-CVE-2025-66478","https://github.com/faizdotid/rust-cve-2025-55182","https://github.com/muthaiyanmani/react2shell-checker","https://github.com/lincemorado97/CVE-2025-55182_CVE-2025-66478","https://github.com/LucasPDiniz/CVE-2025-55182","https://github.com/wangzhengquan/CVE-2025-55182","https://github.com/TH-SecForge/CVE-2025-55182","https://github.com/chitoz1300/React2Shell-CVE-2025-55182","https://github.com/Night-have-dreams/CVE-2025-55182-PoC","https://github.com/thekamran/CVE-2025-55182-Proof-of-Concept","https://github.com/Syrins/CVE-2025-55182-React2Shell-RCE","https://github.com/0xsj/CVE-2025-55182","https://github.com/Security-Phoenix-demo/react2shell-scanner-CVE-2025-55182","https://github.com/Benrich127N/react2shell_analyzer","https://github.com/randarts/react-rce","https://github.com/hamm0nz/react2shell-audit","https://github.com/0xSalm0n/CVE-2025-55182","https://github.com/Macaroniwdcheese/CVE-2025-55182-Lab","https://github.com/LvMalware/CVE-2025-55182","https://github.com/HUAHUAI23/CVE-2025-55182-POC","https://github.com/cahyod/react2shell","https://github.com/yaupunal/CVE-2025-55182-scanner","https://github.com/jandelima/cve-2025-55182-poc-test","https://github.com/im-ezboy/CVE-2025-55182-zoomeye","https://github.com/FurkanKAYAPINAR/React-Next-Scanner","https://github.com/lowercasenumbers/CVE-2025-55182","https://github.com/AggressiveUser/React2Hell","https://github.com/racall/cve-2025-55182-node","https://github.com/FurkanKAYAPINAR/ReactNext2Shell","https://github.com/LQTjim/next-bug-CVE-2025-55182","https://github.com/AliAbdollahiii/react2shell_detector","https://github.com/jan0x190/CVE-2025-55182-Simple-Scanner-main","https://github.com/xiaopeng-ye/react2shell-detector","https://github.com/vulncheck-oss/cve-2025-55182","https://github.com/Shield-Cyber/react2shell-scanner","https://github.com/sun977/CVE-2025-55182","https://github.com/garux-sec/PoC-react2shell-CVE-2025-55182","https://github.com/ancs21/react2shell-scanner-rust","https://github.com/MoisesTapia/http-react2shell","https://github.com/solidevil14/Suricata-Rule-for-Detecting-CVE-2025-55182","https://github.com/techgaun/cve-2025-55182-scanner","https://github.com/rsch-io/CVE-2025-55182-React2Shell","https://github.com/ilixm/PoC-RCE-CVE-2025-55182","https://github.com/iamblacksolo2-BugBounty/POC-CVE-2025-55182","https://github.com/joelvaiju/react2shell-CVE-2025-55182-poc","https://github.com/DevVaibhav07/POC-CVE-2025-55182","https://github.com/liamromanis101/cve-2025-55182","https://github.com/ysfcndgr/React2Shell-CVE-2025-55182-Advanced-Scanner","https://github.com/alfazhossain/CVE-2025-55182-Exploiter","https://github.com/keshavyaduvans/cve-2025-55182","https://github.com/byte16384/CVE-2025-55182","https://github.com/kondukto-io/vulnerable-next-js-poc","https://github.com/eytannatye/R2S_CVE-2025-55182","https://github.com/Jaycelation/CVE-2025-55182","https://github.com/shyambhanushali/React2Shell","https://github.com/amir-malek/react-cve-2025-55182","https://github.com/Yyax13/CVE-2025-55182","https://github.com/Ankitspandey07/React2Shell","https://github.com/Stonelinks/react-cve-2025-55182","https://github.com/ihsansencan/React2Shell-CVE-2025-55182","https://github.com/dr4xp/react2shell","https://github.com/trax69/cve-2025-55182-poc","https://github.com/osman-butt/CVE-2025-55182-demo","https://github.com/theori-io/reactguard","https://github.com/iamblacksolo2-BugBounty/POC2-CVE-2025-55182","https://github.com/bakhod1r/CVE-2025-55182","https://github.com/theman001/CVE-2025-55182_PoC-Test-Server","https://github.com/gunyakit/CVE-2025-55182-PoC-exploit","https://github.com/rix4uni/CVE-2025-55182","https://github.com/gonaumov/cve-2025-55182-checker","https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell","https://github.com/Legus-Yeung/CVE-2025-55182-exploit","https://github.com/DanielXavierJob/-CVE-2025-55182","https://github.com/sponte/nextjs-cve-version-confusion","https://github.com/CrazyloveforWeb/Golang-CVE-2025-55182-POC","https://github.com/JahazielLem/NSE_CVE-2025-55182","https://github.com/CerberusMrXi/Cerberus-React2Shell-Scanner-Exploit","https://github.com/Saad-Ayady/react2shellNSE","https://github.com/VeilVulp/RscScan-cve-2025-55182","https://github.com/yz9yt/React2Shell-CTF","https://github.com/Gymnott1/CVE-2025-55182","https://github.com/J4ck3LSyN-Gen2/CVE-2025-55182","https://github.com/pkrasulia/CVE-2025-55182-NextJS-RCE-PoC","https://github.com/min8282/CVE-2025-55182","https://github.com/Machine-farmer/PunchingBag-for-React2Shell","https://github.com/exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC","https://github.com/mrmtwoj/React2Shell-CVE-2025-55182","https://github.com/LC-pro/CVE-2025-55182-EXP","https://github.com/Tiger-Foxx/exploit-react-CVE-2025-55182","https://github.com/trilogy-group/react2shell-scan","https://github.com/VolksRat71/react2shellexploitvisualized","https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension","https://github.com/Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182","https://github.com/aseemyash/krle","https://github.com/4nuxd/React2Shell","https://github.com/j0lt-github/react2shell-burp","https://github.com/IrsyadSEC/CVE-2025-55182-MassPayloadAttack","https://github.com/Shadowroot97/React2Shell-CVE-2025-55182","https://github.com/yuta3003/CVE-2025-55182","https://github.com/rahul-securify/React2Shell-CVE-2025-55182","https://github.com/raivenLockdown/WEB-CLI_RCE_React2Shell","https://github.com/oguri-souhei/CVE-2025-55182","https://github.com/xalgord/React2Shell","https://github.com/ryanhafid/PoC_CVE-2025-55182","https://github.com/ryanhafid/Scan_CVE-2025-55182","https://github.com/gagaltotal/tot-react-rce-CVE-2025-55182","https://github.com/sho-luv/React2Shell","https://github.com/h0tak88r/next88","https://github.com/TheStingR/ReactOOPS-WriteUp","https://github.com/mantvmass/react2shell","https://github.com/MoLeft/React2Shell-Toolbox","https://github.com/Ya0h4cker/CVE-2025-55182","https://github.com/Kugelbyte/React2Shell-Analysis","https://github.com/dhananjayakumarn/CVE-2025-55182-Lab","https://github.com/ZorvithonLeo-Null/CVE-2025-55182-exploit","https://github.com/sangleshubham/React-Security-CVE-2025-55182-Exploit","https://github.com/TrixSec/CVE-2025-55182-Scanner","https://github.com/mounta11n/CHECK-CVE-2025-55182-AND-CVE-2025-66478","https://github.com/grejh0t/CVE-2025-55182","https://github.com/hidden-investigations/react2shell-vulnlab","https://github.com/MammaniNelsonD/React2P4IM0Nshell","https://github.com/tinashelorenzi/CVE-2025-55182","https://github.com/ProwlSec/React2Shell","https://github.com/VVVI5HNU/CVE-2025-55182","https://github.com/CyberPrince-hub/React2shell-ultimate-scanner","https://github.com/hidden-investigations/react2shell-scanner","https://github.com/mivmi/CVE-2025-55182","https://github.com/subhdotsol/CVE-2025-55182","https://github.com/Call123X/-cve-2025-55182","https://github.com/hulh122/CVE-2025-55182","https://github.com/simantchaudhari/CVE-2025-55182","https://github.com/premdanav/react2shelldemo","https://github.com/S-Mughal/NextJS-app-CVE-2025-55182","https://github.com/itumo-arigatone/study-CVE-2025-55182","https://github.com/EQSTLab/CVE-2025-55182","https://github.com/scumfrog/FiberBreak","https://github.com/d0cnull/nextjs-CVE-2025-55182","https://github.com/Mustafa1p/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478","https://github.com/M4rgs/CVE-2025-55182-React2Shell-Exploit","https://github.com/nulltrace1336/CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-","https://github.com/pwnxpl0it/react2shell-lab","https://github.com/ceh-aditya-raj/CVE-2025-55182","https://github.com/r4j3sh-com/CVE-2025-55182","https://github.com/degenwithheart/React2Shell-Vulnerability-Verification-Script","https://github.com/rashedhasan090/cve-2025-55182-mitigator","https://github.com/RavinduRathnayaka/CVE-2025-55182-PoC","https://github.com/open-flaw/CVE-2025-55182","https://github.com/chrahman/react2shell-CVE-2025-55182-full-rce-script","https://github.com/lamaper/CVE-2025-55182-Toolbox","https://github.com/mahaveer-choudhary/CVE-2025-55182","https://github.com/MeGaNeKoS/secure-by-default-rce-demo","https://github.com/tamagorengs/react2shell-poc-CVE-2025-55182","https://github.com/xxxTectationxxx/React2Shell-CVE-Lab","https://github.com/vijay-shirhatti/RSC-Detect-CVE-2025-55182","https://github.com/p3ta00/react2shell-poc","https://github.com/vonuyvicoo/nextploiter","https://github.com/niokagi/react-cve-2025-55182","https://github.com/knightwolf01/React2Shell","https://github.com/BlackTechX011/React2Shell","https://github.com/S3cr3t-SDN/React4Shell","https://github.com/ckex/test-vuln","https://github.com/jensnesten/React2Shell-PoC","https://github.com/Farhan9488/CVE-2025-55182-research","https://github.com/bigbluewhale111/CVE-2025-55182-LAB","https://github.com/guiimoraes/react2shell-evolved","https://github.com/Jakelife/HACKVISER-CVE-2025-55182-LAB","https://github.com/thqxploit666/CVE-2025-55182","https://github.com/itsismarcos/Bot-exploit-CVE-2025-55182","https://github.com/0xROI/CVE-2025-55182","https://github.com/Updatelap/CVE-2025-55182","https://github.com/kanyokoo/React-Server-Components-Remote-Code-Execution-CVE-2025-55182-","https://github.com/KingHacker353/R2C-CVE-2025-55182-66478","https://github.com/amirali-ramezani/react2shell-CVE-2025-55182-","https://github.com/git0xLai/React2ShellPoC","https://github.com/hndko/react2shell-rce-autobot","https://github.com/Goultarde/CVE-2025-55182-React2Shell-Lab","https://github.com/captain4554/CVE-2025-55182-Scanner","https://github.com/captain4554/captain4554.github.io","https://github.com/joaovicdev/EXPLOIT-CVE-2025-55182","https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182","https://github.com/gahoole77/gahoole77.github.io","https://github.com/yannisduvignau/react2shell-exploit","https://github.com/momika233/CVE-2025-55182-bypass","https://github.com/mooowu/cve-2025-55182-poc","https://github.com/Faithtiannn/CVE-2025-55182","https://github.com/termireum/react2shell","https://github.com/Least-Significant-Bit/CVE-2025-55182","https://github.com/faisha1311/React2Shell-CVE-2025-55182-TryHackMe","https://github.com/BBD-YZZ/CVE-2025-55182","https://github.com/Vladjrfhfg/React-site-CVE-2025-55182","https://github.com/Namsom007/CVE-2025-55182-Exploit","https://github.com/MemerGamer/CVE-2025-55182","https://github.com/Sairbo/Unihackers---CVE-2025-55182-","https://github.com/AsadAhmad-1337/React-2-Shell","https://github.com/deepankarkumar1/CVE-2025-55182_Vulnerable-Application","https://github.com/wnaspy/CVE-2025-55182","https://github.com/woorifisa-service-dev-6th/tech-seminar-React2Shell","https://github.com/MuhammadUwais/React2Shell","https://github.com/Evillm/CVE-2025-55182-PoC","https://github.com/BrianLopezM99/react2shell-CVE-2025-55182","https://github.com/George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0-","https://github.com/atiilla/CVE-2025-55182","https://github.com/snipevx/React2Shell-POC","https://github.com/BIG02-bot/React2Shell-CVE-2025-55182-An-lise-T-cnica","https://github.com/Wyl-cmd/CVE-2025-55182","https://github.com/H4R335HR/reactshell","https://github.com/orgito1015/CVE-2025-55182-Researching-process","https://github.com/0xBlackash/CVE-2025-55182","https://github.com/alptexans/RSC-Detect-CVE-2025-55182","https://github.com/MrMahile/MassScanning-CVE-2025-55182","https://github.com/androidteacher/REACT-CVE-2025-55182-Lab","https://github.com/InferiorAK/CVE-2025-55182-React2Shell-Async-Scanner","https://github.com/luoqichen/CVE-2025-55182-POC","https://github.com/lutraat/CVE-2025-55182-React-RSC-Exploit","https://github.com/monarchfish/cve-2025-55182-poc","https://github.com/nexxp90/CVE-2025-55182_RCE_Exploit","https://github.com/luoluoqingge/CVE-2025-55182","https://github.com/RyosukeDTomita/CVE-2025-55182","https://github.com/eagle-nett/React2Shell-PoC-CVE-2025-55182","https://github.com/devianntsec/CVE-2025-55182","https://github.com/l0lsec/cve-2025-55182-lab","https://github.com/0x0asif/CVE-2025-55182","https://github.com/amikanev/CVE-2025-55182-LAB","https://github.com/hujiaozhuzhu/CVE-2025-55182_liyon","https://github.com/aliksir/nextjs-security-scanner","https://github.com/porsellaj/cve-2025-55182-react2shell-analysis","https://github.com/masterwok/PoC-CVE-2025-55182","https://github.com/kaxm23/CVE-2025-55182-Auto-Scanner","https://github.com/kaxm23/rust-cve-2025-55182-scanner","https://github.com/RewantChaudhari/nextjs-rce-incident-response","https://github.com/oscar-mine/R2SAE","https://github.com/AbdullahMaqbool22/Explosive-As-Hell-MCS-Qualifer-Web-500","https://github.com/DeDnY/CVE-2025-55182-poc-panel","https://github.com/opsecramdan/react2shell-cve-2025-55182","https://github.com/Mohamedniane/cve-2025-55182-analysis","https://github.com/joaoreis13/flight-risk","https://github.com/shibaaa204/React2Shell","https://github.com/Cybersecurity-Enthusiasts-CE/CVE-2025-55182-Researching-process","https://github.com/MuharremK0/Info-Sys-Security-CVE-2025-55182","https://github.com/ycseo-git/CVE-2025-55182","https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell","https://github.com/renewablehacking/CVE-2025-55182-React-19.2.0","https://github.com/SpeatX/React2Shell-CVE-2025-55182","https://github.com/w3nch/CVE-2025-55182-in-go","https://github.com/Jenderal92/CVE-2025-55182-React2shell","https://github.com/Jeanback1/react-rsc-cve-2025-55182-lab","https://github.com/sonnycroco/HTB-Reactor-Linux-Machine-Walkthrough","https://github.com/LuizHenz/PoC-CVE-2025-55182","https://github.com/hakkuri01/r2rs","https://github.com/tanvirahmedcs/CVE-2025-55182","https://github.com/yurahshell/CVE-2025-55182","https://github.com/rvzsec/react2shell","https://github.com/TechWithOrgito/CVE-2025-55182-Researching-process","https://github.com/AkhmadKholmurodov/React2Shell_Exploit","https://github.com/Alejandro609x/JEFAZO-CVE-2025-55182-Checker","https://github.com/olezhaku/react2shell-toolkit","https://github.com/cc3305/CVE-2025-55182","https://github.com/SentinelXofficial/CVE-2025-55182","https://github.com/Fomovet/cve-2025-55182","https://github.com/avoidme12/CVE-2025-55182-POC","https://github.com/litndat/React2Shell-PoC-CVE-2025-55182","https://github.com/k1llmelira/react2shell-exploit","https://github.com/Herick-Costa/CVE-2025-55182-React2Shell-RCE","https://github.com/diamorphine666/React2shell-CVE-2025-55182-Exploit","https://github.com/se1zer/Nextjs_Exploit_Tool","https://github.com/6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-","https://github.com/razureink/cve-2025-55182-react2shell_reproduction","https://github.com/indra-031/React2Shell-Exploit-CVE-2025-55182","https://github.com/Phucc29/CVE-2025-55182","https://github.com/CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit","https://github.com/dotnetguard/CVE-2025-55182-Exploit","https://github.com/aisha-jimoh/cve-2025-55182-react2shell-analysis","https://github.com/balochkainat160-cyber/cs50-cybersecurity","https://github.com/kevin9480/Security_incident_report","https://github.com/PhanHoangKhang/React2Shell"],"match_product":"React"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","has_exploit":true,"description":"An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and ...","published":"2025-12-11T20:16:00.460","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-55183","match_type":"product","confidentiality_impact":"LOW","exploit_links":["https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components","https://github.com/Saturate/CVE-2025-55183","https://github.com/kimtruth/CVE-2025-55183-poc","https://github.com/williavs/nextjs-security-update","https://github.com/X-Cotang/CVE-2025-55183_POC","https://github.com/omaidnebari/RSC-Scanner-POC","https://github.com/StealthMoud/react-server-cve-lab"],"match_product":"React"}],"whois":{"abuse":"anti-spam@chinatelecom.cn","related_nets":[],"net":{"country":"CN","address":"No.31 ,jingrong street,beijing\n100032","name":"CHINANET-CQ","start_ip":"183.64.0.0","range":"183.64.0.0 - 183.71.255.255","description":"CHINANET Chongqing Province Network\nData Communication Division\nChina Telecom","handle":"AC1573-AP","cidr":["183.64.0.0/13"],"net_size":524287,"updated":"2021-06-15T08:06:22Z","end_ip":"183.71.255.255","contacts":{"emails":["anti-spam@chinatelecom.cn","ipmanager.cq@chinatelecom.cn"],"persons":["Chinanet Hostmaster"],"phones":["+000000000","+862368614888","+86-10-58501724"]}},"asn":{"registry":"apnic","number":["4134"],"country":"CN","name":"CHINANET-BACKBONE - No.31","cidr":"183.64.0.0/13","updated":"2009-10-23"}},"port":8333,"host":"183.66.171.22","http":{"headers":{"date":["Wed, 19 Aug 2026 00:38:25 GMT"],"x_powered_by":["Next.js"],"server":["nginx/1.26.2"],"content_type":["text/html; charset=utf-8"],"vary":["rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding"],"strict_transport_security":["max-age=31536000; includeSubdomains"],"cache_control":["private, no-cache, no-store, max-age=0, must-revalidate"],"connection":["keep-alive"]},"transfer_encoding":["chunked"],"status_code":200,"body_sha256":"dbf1309c43be5a1368547994185838d21522a3dd48c2b3478f72a0387da920a5","meta":["charSet=\"utf-8\"","name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, viewport-fit=cover, user-scalable=no\"","name=\"description\" content=\"AI 智能助手\""],"description":"AI 智能助手","body":"AI路小智
    ","status_line":"200 OK","title":"AI路小智","version":"1.1","content_length":-1},"tag":[{"webpack":{"version":""},"name":"webpack","description":"Webpack is an open-source JavaScript module bundler.","fullname":"Webpack","category":["Miscellaneous"]},{"dc_js":{"version":""},"name":"dc_js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","fullname":"dc.js","category":["JavaScript graphics","JavaScript libraries"]},{"name":"hsts","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","fullname":"HSTS","hsts":{"version":""},"category":["Security"]},{"nginx":{"version":"1.26.2"},"name":"nginx","cpe":["cpe:2.3:a:f5:nginx:1.26.2:*:*:*:*:*:*:*"],"description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","fullname":"Nginx","category":["Web servers","Reverse proxies"]},{"name":"next_js","cpe":["cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*"],"description":"Next.js is a React framework for developing single page Javascript applications.","fullname":"Next.js","category":["JavaScript frameworks","Web frameworks"],"next_js":{"version":""}},{"node_js":{"version":""},"name":"node_js","cpe":["cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*"],"description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","fullname":"Node.js","category":["Programming languages"]},{"name":"react","cpe":["cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*"],"description":"React is an open-source JavaScript library for building user interfaces or UI components.","react":{"version":""},"fullname":"React","category":["JavaScript frameworks"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"jarm":"07d19d1ad21d21d00042d43d00000076e5b3c488a88e5790970b78ffb8afc2","ip":"182.176.111.218","isp":"PTCL","certificate":{"issuer_dn":"CN=masoomeen","fingerprint_md5":"5d2633a738da2ebf13d6b5a4aef62dfa","signature":{"valid":true,"signature_algorithm":{"name":"SHA256-RSA","oid":"1.2.840.113549.1.1.11"},"value":"Ktq3UsC079BN3eO5Qhk6qPYrWHOHreJ3oVEBryCEzKOM6U+eVhW7S7qTJvHRN0GxvJBbyqZpVcUhCRg2gCNRDbq/EiQrRphSfjLihSWcH+YojBgikCnrqOtABMsGO5ISiZQK/Zk46qbFONdsF77VcznK0rUp6+Sp8UDeYXauwRUhGbP3vkCOt6iF2GZNDIXuMLnbU8U/q8eP2frWX5zp2XTpXWLwThMNS+mdzK7wgSlFXEuxlcXD3Ptu77woTl+vNXDVsvkDZ2xPOHfCzHj503ViZOqF4THSbcpQniIe24dnRI5WhNHxlqPq1kK3aHdzS2uAsWTtaNDA4jfc2aWsng==","self_signed":true},"src":"https://182.176.111.218:8333/","redacted":false,"subject":{"common_name":["masoomeen"]},"serial_number":"98396685758010876480712047763868652195348980588","version":3,"issuer":{"common_name":["masoomeen"]},"fingerprint_sha256":"30d55ed83968e46cf9d46333324ce25e8fe069a8ef490a29c3b532c74ccb960f","tbs_noct_fingerprint":"d6f725c1544ec0756e58d611e7068c182dcd11d9cdd378cca1e1f43ebe0d2631","extensions":{"subject_key_id":"1a5107a7e14f3ae781c417f4fa3a4bdaf6cf1f1c","subject_alt_name":{"dns_names":["masoomeen"]},"basic_constraints":{"is_ca":false}},"tbs_fingerprint":"d6f725c1544ec0756e58d611e7068c182dcd11d9cdd378cca1e1f43ebe0d2631","subject_dn":"CN=masoomeen","names":["masoomeen"],"fingerprint_sha1":"8d66f26d5c486d279c4ad75dd048facaa06ad530","spki_subject_fingerprint":"643d8bc96b3dc561c117833081a63332a08e435dc7d7eafe786ff589f8e13465","validity":{"length":315360000,"start":"2025-03-21T06:50:57Z","end":"2035-03-19T06:50:57Z"},"validation_level":"unknown"},"uri":"https://182.176.111.218:8333/","host_type":"ip","prot7":"http","target":{"ip":"182.176.111.218","type":"ip"},"geo":{"continent":"Asia","country":"PK","city":"Bahawalpur","tz":"Asia/Karachi","accuracy":50,"location":{"lon":73.2598,"lat":30.0018},"postal":"63100","registered_country":"PK","subdivisions":["Punjab"]},"path":"/","prot4":"tcp","protocol":"https","cve":[{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an ...","published":"2026-05-28T19:16:42.073","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-47333","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lead to a use-after-free (UAF) and, theoretically, arbitrary code execution.","published":"2026-05-28T19:16:41.757","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-47331","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","has_exploit":true,"description":"In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place ...","published":"2026-04-22T09:16:21.270","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-31431","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["http://www.openwall.com/lists/oss-security/2026/04/29/23","http://www.openwall.com/lists/oss-security/2026/04/29/26","http://www.openwall.com/lists/oss-security/2026/04/30/18","http://www.openwall.com/lists/oss-security/2026/04/30/5","https://copy.fail","https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170","https://github.com/theori-io/copy-fail-CVE-2026-31431","https://xint.io/blog/copy-fail-linux-distributions#the-fix-6","https://github.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc","https://github.com/tgies/copy-fail-c","https://github.com/ZephrFish/CopyFail-CVE-2026-31431","https://github.com/insomnisec/Detections-CVE-2026-31431","https://github.com/ryan2929/CVE-2026-31431","https://github.com/st4rburn/RootRemover","https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH","https://github.com/JuanBindez/CVE-2026-31431","https://github.com/selectel/mks-copy-fail-mitigation","https://github.com/deckhouse/d8-copy-fail-mitigation","https://github.com/HulnotHutu/CVE-2026-31431","https://github.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT","https://github.com/bootsareme/copyfail-deconstructed","https://github.com/monobrau/copyfailscan","https://github.com/suominen/CVE-2026-31431","https://github.com/sandraschi/copy-fail-mcp","https://github.com/juliosuas/copyfail-guard","https://github.com/samanzamani/copy-fail-checker","https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe","https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284","https://github.com/Liverwortenuresis371/copyfail-rs","https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail","https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag","https://github.com/KaraZajac/DIRTYFAIL","https://github.com/krisiasty/vcheck","https://github.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe","https://github.com/Helios973/CVE-2026-31431_exp.c","https://github.com/vorkampfer/copyfail2_electric_boogaloo_fix","https://github.com/Lutfifakee-Project/CVE-2026-31431","https://github.com/mauricioportela/CVE-2026-31431-Analysis","https://github.com/gbonacini/CVE-2026-31431","https://github.com/sh4den/CVE-2026-31431-copyfail-aarch64","https://github.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab","https://github.com/SilverRuler/copy-fail-CVE-2026-31431","https://github.com/Sebastian294/cve-2026-31431","https://github.com/0xFuffM3/CVE-2026-31431-CopyFail","https://github.com/dotPY-hax/CopyFail","https://github.com/zKaaanon/ProyectoFinalSO","https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit","https://github.com/Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention","https://github.com/Pithase/asm-copyfail","https://github.com/4xura/CVE-2026-31431-Copy-Fail","https://github.com/royayub/CVE-2026-31431","https://github.com/Yakovyakov/cve-2026-31431-mitigation","https://github.com/cj667113/OCI-Ansible-Fix-CVE-2026-31431","https://github.com/GubiczaP/cve-2026-31431-checker","https://github.com/sgkdev/ptrace_may_dream","https://github.com/yangh-beep/CVE-2026-31431-C","https://github.com/JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC","https://github.com/4n4s4zi/copyfail-alpine","https://github.com/1m1ssher/copy-fail-python","https://github.com/ridhinva/linux-kernel-algif-aead-checker","https://github.com/Iamliuxiaozhen/copy_fail","https://github.com/songzzzz/CVE-2026-31431","https://github.com/vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431","https://github.com/nonameuserosint-hue/Copyfail-sh","https://github.com/tematemaru/CVE-2026-31431-simple-test","https://github.com/1neptune/CopyFail","https://github.com/zs1n/copy-fail-CVE-2026-31431","https://github.com/t1ckprivate/CVE-2026-31431-Copy-Fail","https://github.com/kinryulabs/rootpacket-cve-2026-31431","https://github.com/SugiB3o/CVE-2026-31431","https://github.com/TeamN4C/SG-2026-0013","https://github.com/TrevoCastles/CVE-2026-31431-copy-fail","https://github.com/dev1681/CVE-2026-31431","https://github.com/joaocalciolari07/copyfail-guard"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.8","integrity_impact":"HIGH","has_exploit":true,"description":"Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap\"s private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, ...","published":"2026-03-17T14:16:17.410","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-3888","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/DanielTangnes/CVE-2026-3888"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","has_exploit":true,"description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","published":"2025-06-30T21:15:30.257","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-32463","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/","https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot","https://github.com/pr0v3rbs/CVE-2025-32463_chwoot","https://github.com/4f-kira/CVE-2025-32463","https://github.com/K1tt3h/CVE-2025-32463-POC","https://github.com/IC3-512/linux-root-kit","https://github.com/7r00t/cve-2025-32463-lab","https://github.com/SysMancer/CVE-2025-32463","https://github.com/kh4sh3i/CVE-2025-32463","https://github.com/neko205-mx/CVE-2025-32463_Exploit","https://github.com/pevinkumar10/CVE-2025-32463","https://github.com/zhaduchanhzz/CVE-2025-32463_POC","https://github.com/robbert1978/CVE-2025-32463_POC","https://github.com/Mikivirus0/sudoinjection","https://github.com/san8383/CVE-2025-32463","https://github.com/0xAkarii/CVE-2025-32463","https://github.com/CIA911/sudo_patch_CVE-2025-32463","https://github.com/mirchr/CVE-2025-32463-sudo-chwoot","https://github.com/ill-deed/CVE-2025-32463_illdeed","https://github.com/zinzloun/CVE-2025-32463","https://github.com/0p5cur/CVE-2025-32463-POC","https://github.com/gmh5225/Blackash-CVE-2025-32463","https://github.com/FreeDurok/CVE-2025-32463-PoC","https://github.com/Chocapikk/CVE-2025-32463-lab","https://github.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT","https://github.com/SpongeBob-369/cve-2025-32463","https://github.com/lowercasenumbers/CVE-2025-32463_sudo_chroot","https://github.com/abrewer251/CVE-2025-32463_Sudo_PoC","https://github.com/morgenm/sudo-chroot-CVE-2025-32463","https://github.com/MohamedKarrab/CVE-2025-32463","https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC","https://github.com/Rajneeshkarya/CVE-2025-32463","https://github.com/MGunturG/CVE-2025-32463","https://github.com/Maalfer/Sudo-CVE-2021-3156","https://github.com/daryllundy/CVE-2025-32463","https://github.com/AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462","https://github.com/ChetanKomal/sudo_exploit","https://github.com/KaiHT-Ladiant/CVE-2025-32463","https://github.com/y4ney/CVE-2025-32463-lab","https://github.com/aldoClau98/CVE-2025-32463","https://github.com/painoob/CVE-2025-32463","https://github.com/1xPwn/CVE-2025-32463","https://github.com/Yuy0ung/CVE-2025-32463_chwoot","https://github.com/blackcat4347/CVE-2025-32463_PoC","https://github.com/ashardev002/CVE-2025-32463_chwoot","https://github.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape","https://github.com/AC8999/CVE-2025-32463","https://github.com/secvulnhub/CVE-2025-32463-EXPLOIT","https://github.com/dr4xp/sudo-chroot","https://github.com/NewComrade12211/CVE-2025-32463","https://github.com/Ghstxz/CVE-2025-32463","https://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation","https://github.com/justjoeyking/CVE-2025-32463","https://github.com/Mr-Alperen/CVE-2025-32463","https://github.com/SpycioKon/CVE-2025-32463","https://github.com/vpr-labs/CVE-2025-32463","https://github.com/danilo1992-sys/CVE-2025-32463","https://github.com/0xBlackash/CVE-2025-32463","https://github.com/Fomovet/cve-2025-32463","https://github.com/0xdak/CVE-2025-32463_exploit"],"match_product":"Ubuntu"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Ubuntu\"s configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.","published":"2025-01-31T02:15:28.440","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-1736","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.1","integrity_impact":"HIGH","has_exploit":true,"description":"A security regression (CVE-2006-5051) was discovered in OpenSSH\"s server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to ...","published":"2024-07-01T13:15:06.467","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-6387","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://santandersecurityresearch.github.io/blog/sshing_the_masses.html","https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt","http://www.openwall.com/lists/oss-security/2024/07/03/11","http://www.openwall.com/lists/oss-security/2024/07/04/2","http://www.openwall.com/lists/oss-security/2024/07/08/2","http://www.openwall.com/lists/oss-security/2024/07/09/5","http://www.openwall.com/lists/oss-security/2024/07/10/1","https://santandersecurityresearch.github.io/blog/sshing_the_masses.html","https://www.exploit-db.com/exploits/52269","https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt","https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387","https://github.com/7etsuo/cve-2024-6387-poc","https://github.com/zgzhang/cve-2024-6387-poc","https://github.com/acrono/cve-2024-6387-poc","https://github.com/lflare/cve-2024-6387-poc","https://github.com/getdrive/CVE-2024-6387-PoC","https://github.com/FerasAlrimali/CVE-2024-6387-POC","https://github.com/passwa11/cve-2024-6387-poc","https://github.com/jack0we/CVE-2024-6387","https://github.com/xaitax/CVE-2024-6387_Check","https://github.com/bigb0x/CVE-2024-6387","https://github.com/wiggels/regresshion-check","https://github.com/P4x1s/CVE-2024-6387","https://github.com/betancour/OpenSSH-Vulnerability-test","https://github.com/muyuanlove/CVE-2024-6387fixshell","https://github.com/TAM-K592/CVE-2024-6387","https://github.com/teamos-hub/regreSSHion","https://github.com/ahlfors/CVE-2024-6387","https://github.com/Mufti22/CVE-2024-6387-checkher","https://github.com/thegenetic/CVE-2024-6387-exploit","https://github.com/R4Tw1z/CVE-2024-6387","https://github.com/d0rb/CVE-2024-6387","https://github.com/CiderAndWhisky/regression-scanner","https://github.com/shamo0/CVE-2024-6387_PoC","https://github.com/paradessia/CVE-2024-6387-nmap","https://github.com/PrincipalAnthony/CVE-2024-6387-Updated-x64bit","https://github.com/daniel-odrinski/CVE-2024-6387-Mitigation-Ansible-Playbook","https://github.com/rumochnaya/openssh-cve-2024-6387.sh","https://github.com/zenzue/CVE-2024-6387-Mitigation","https://github.com/devarshishimpi/CVE-2024-6387-Check","https://github.com/hssmo/cve-2024-6387_AImade","https://github.com/ACHUX21/checker-CVE-2024-6387","https://github.com/AiGptCode/ssh_exploiter_CVE-2024-6387","https://github.com/xristos8574/regreSSHion-nmap-scanner","https://github.com/particle99/CVE-2024-6387-POC","https://github.com/xonoxitron/regreSSHion","https://github.com/no-one-sec/CVE-2024-6387","https://github.com/dawnl3ss/CVE-2024-6387","https://github.com/MrR0b0t19/CVE-2024-6387-Exploit-POC","https://github.com/th3gokul/CVE-2024-6387","https://github.com/n1cks0n/Test_CVE-2024-6387","https://github.com/l0n3m4n/CVE-2024-6387","https://github.com/RickGeex/CVE-2024-6387-Checker","https://github.com/xonoxitron/regreSSHion-checker","https://github.com/BrandonLynch2402/cve-2024-6387-nuclei-template","https://github.com/edsonjt81/CVE-2024-6387_Check","https://github.com/grupooruss/CVE-2024-6387","https://github.com/CognisysGroup/CVE-2024-6387-Checker","https://github.com/sxlmnwb/CVE-2024-6387","https://github.com/Symbolexe/CVE-2024-6387","https://github.com/harshinsecurity/sentinelssh","https://github.com/t3rry327/cve-2024-6387-poc","https://github.com/jocker2410/CVE-2024-6387_poc","https://github.com/JackSparrowhk/ssh-CVE-2024-6387-poc","https://github.com/turbobit/CVE-2024-6387-OpenSSH-Vulnerability-Checker","https://github.com/sms2056/CVE-2024-6387","https://github.com/invaderslabs/regreSSHion-CVE-2024-6387-","https://github.com/lala-amber/CVE-2024-6387","https://github.com/4lxprime/regreSSHive","https://github.com/sardine-web/CVE-2024-6387_Check","https://github.com/0x4D31/cve-2024-6387_hassh","https://github.com/sardine-web/CVE-2024-6387-template","https://github.com/imv7/CVE-2024-6387","https://github.com/azurejoga/CVE-2024-6387-how-to-fix","https://github.com/Karmakstylez/CVE-2024-6387","https://github.com/vkaushik-chef/regreSSHion","https://github.com/dgourillon/mitigate-CVE-2024-6387","https://github.com/mrmtwoj/CVE-2024-6387","https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker","https://github.com/kubota/CVE-2024-6387-Vulnerability-Checker","https://github.com/DimaMend/cve-2024-6387-poc","https://github.com/redux-sibi-jose/mitigate_ssh","https://github.com/dream434/CVE-2024-6387","https://github.com/Ap0dexMe0/CVE-2024-6387","https://github.com/prelearn-code/CVE-2024-6387","https://github.com/l-urk/CVE-2024-6387","https://github.com/alex14324/ssh_poc2024","https://github.com/X-Projetion/CVE-2023-4596-OpenSSH-Multi-Checker","https://github.com/s1d6point7bugcrowd/CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH","https://github.com/almogopp/OpenSSH-CVE-2024-6387-Fix","https://github.com/HadesNull123/CVE-2024-6387_Check","https://github.com/identity-threat-labs/CVE-2024-6387-Vulnerability-Checker","https://github.com/identity-threat-labs/Article-RegreSSHion-CVE-2024-6387","https://github.com/anhvutuan/CVE-2024-6387-poc-1","https://github.com/YassDEV221608/CVE-2024-6387","https://github.com/awusan125/test_for6387","https://github.com/kinu404/CVE-2024-6387","https://github.com/xiw1ll/CVE-2024-6387_Checker","https://github.com/moften/regreSSHion-CVE-2024-6387","https://github.com/OHHDamnBRO/Noregressh","https://github.com/Ngagne-Demba-Dia/CVE-2024-6387-corrigee","https://github.com/Doux-x/CVE-2024-6387-analysis","https://github.com/kaleth4/CVE-2024-6387","https://github.com/oseasfr/Scanner_CVE_OpenSSH","https://github.com/vuducmanhno100-cloud/CVE-2024-6387","https://github.com/m0n3ef/regreSSHion-Checker","https://github.com/al7araziruby-jpg/CVE-2024-6387-OpenSSH-Analysis","https://github.com/hasan8babiker/CVE-2024-6387"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.8","integrity_impact":"HIGH","has_exploit":true,"description":"When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main ...","published":"2024-06-21T20:15:10.630","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2020-27352","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://bugs.launchpad.net/snapd/+bug/1910456","https://bugs.launchpad.net/snapd/+bug/1910456"],"match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Apport does not disable python crash handler before entering chroot","published":"2024-06-04T22:15:10.087","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-28657","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.1","integrity_impact":"HIGH","description":"is_closing_session() allows users to create arbitrary tcp dbus connections","published":"2024-06-04T22:15:09.940","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-28655","match_type":"product","confidentiality_impact":"NONE","match_product":"Ubuntu"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server\"s mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.","published":"2026-06-08T16:16:44.223","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-49975","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-","https://github.com/mrx-arafat/CVE-2026-49975-POC","https://github.com/obrige/http2-bomb","https://github.com/renzi25031469/CVE-2026-49975-HTTP-2-Bomb","https://github.com/EQSTLab/CVE-2026-49975","https://github.com/LSG-PolarBear/CVE-2026-49975","https://github.com/LiaoZiqi-GZFLS/CVE-2026-49975","https://github.com/minc-nice-100/http2-bomb-analysis-paper","https://github.com/razureink/cve-2026-49975-http2bomb_reproduction","https://github.com/0xc03307b/CVE-2026-49975","https://github.com/wlor0623/http2-bomb-detector"],"match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:40.583","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-44631","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Loop with Unreachable Exit Condition (\"Infinite Loop\") vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to ...","published":"2026-06-08T16:16:40.453","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44186","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:40.327","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-44185","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the ...","published":"2026-06-08T16:16:39.263","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42536","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which ...","published":"2026-06-08T16:16:39.127","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42535","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes ...","published":"2026-06-08T16:16:38.537","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34356","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.","published":"2026-06-08T16:16:38.387","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34355","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","published":"2026-06-08T16:16:37.967","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-29167","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled ...","published":"2026-05-05T22:16:00.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-28780","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\"s mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes ...","published":"2026-05-05T14:16:08.507","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-29168","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for ...","published":"2026-05-04T15:16:03.720","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-29169","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","published":"2026-05-04T13:16:00.940","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-34059","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.8","integrity_impact":"HIGH","description":"An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.","published":"2026-05-04T13:16:00.297","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-24072","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.3","integrity_impact":"HIGH","has_exploit":true,"description":"Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd=\"...\" directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended ...","published":"2025-12-05T14:15:49.153","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2025-58098","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/dhmosfunk/CVE-2025-58098"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are ...","published":"2025-12-05T11:15:52.210","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-59775","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it ...","published":"2025-12-05T11:15:51.890","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-55753","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.","published":"2025-07-10T17:15:48.337","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-53020","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/galbarnahum/CVE-2025-53020-PoC"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.4","integrity_impact":"HIGH","description":"In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using \"SSLEngine optional\" to enable ...","published":"2025-07-10T17:15:48.193","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-49812","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2. Configurations affected are a reverse proxy is ...","published":"2025-07-10T17:15:48.050","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-49630","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clients is possible using TLS 1.3 session resumption. Configurations are affected when mod_ssl is configured for multiple virtual hosts, ...","published":"2025-07-10T17:15:46.553","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-23048","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used ...","published":"2025-07-10T17:15:46.400","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-47252","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from ...","published":"2025-07-10T17:15:46.133","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-43394","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response ...","published":"2025-07-10T17:15:45.987","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-43204","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as ...","published":"2025-07-10T17:15:45.343","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-42516","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue.","published":"2024-07-18T10:15:03.217","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-40898","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/anilpatel199n/CVE-2024-40898","https://github.com/ForceEA001/CVE-2024-40898-SSL-Bypass-Detection"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL\"s to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.","published":"2024-07-01T19:15:05.760","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-39573","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.","published":"2024-07-01T19:15:05.083","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38477","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to ...","published":"2024-07-01T19:15:04.977","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38476","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/abanop22333/Apache-Authentication-Flaw-Research-CVE-2024-38476-"],"match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","has_exploit":true,"description":"Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting ...","published":"2024-07-01T19:15:04.883","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-38475","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/p0in7s/CVE-2024-38475","https://github.com/soltanali0/CVE-2024-38475","https://github.com/abrewer251/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC","https://github.com/syaifulandy/CVE-2024-38475","https://github.com/Nyakki-Labs-0x420/Myesve"],"match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to ...","published":"2024-07-01T19:15:04.760","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38474","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"NONE","has_exploit":true,"description":"Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version ...","published":"2024-07-01T19:15:04.657","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-38473","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Abdurahmon3236/CVE-2024-38473","https://github.com/juanschallibaum/CVE-2024-38473-Nuclei-Template"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that ...","published":"2024-07-01T19:15:04.563","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-38472","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Abdurahmon3236/CVE-2024-38472","https://github.com/mrmtwoj/apache-vulnerability-testing"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.","published":"2024-04-04T20:15:08.720","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-27316","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/lockness-Ko/CVE-2024-27316","https://github.com/aeyesec/CVE-2024-27316_poc"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"LOW","has_exploit":true,"description":"Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.","published":"2024-04-04T20:15:08.047","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2023-38709","match_type":"cpe","confidentiality_impact":"LOW","exploit_links":["https://github.com/mrmtwoj/apache-vulnerability-testing"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.","published":"2023-10-23T07:15:11.103","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-31122","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.","published":"2023-03-07T16:15:09.613","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2023-27522","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific ...","published":"2023-03-07T16:15:09.477","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-25690","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/tbachvarova/linux-apache-fix-mod_rewrite-spaceInURL","https://github.com/dhmosfunk/CVE-2023-25690-POC","https://github.com/thanhlam-attt/CVE-2023-25690","https://github.com/oOCyginXOo/CVE-2023-25690-POC","https://github.com/arnavps/CTF-Web-Exploitation","https://github.com/giordy0424/CVE-2023-25690_lab"],"match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"HIGH","base_score":"9.0","integrity_impact":"HIGH","description":"Inconsistent Interpretation of HTTP Requests (\"HTTP Request Smuggling\") vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache ...","published":"2023-01-17T20:15:11.580","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-36760","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.","published":"2023-01-17T20:15:11.177","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2006-20001","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/r1az4r/CVE-2006-20001"],"match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.","published":"2022-06-09T17:15:09.977","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-31813","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/dodiorne/cve-2022-31813","https://github.com/yiliufeng168/CVE-2022-31813"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer.","published":"2022-06-09T17:15:09.867","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-30556","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size.","published":"2022-06-09T17:15:09.283","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-29404","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"NONE","description":"Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, ...","published":"2022-06-09T17:15:09.230","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-28615","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","has_exploit":true,"description":"Inconsistent Interpretation of HTTP Requests (\"HTTP Request Smuggling\") vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache ...","published":"2022-06-09T17:15:09.077","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-26377","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/watchtowrlabs/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc"],"match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.","published":"2022-03-14T11:15:09.187","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-23943","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.","published":"2022-03-14T11:15:09.133","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-22721","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling","published":"2022-03-14T11:15:09.083","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-22720","match_type":"cpe","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Benasin/CVE-2022-22720"],"match_product":"Apache 2.4.52"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.","published":"2022-03-14T11:15:09.023","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-22719","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.5","integrity_impact":"NONE","description":"Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended ...","published":"2026-06-08T16:16:40.203","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-44119","match_type":"cpe","confidentiality_impact":"HIGH","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"LOW","description":"Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.","published":"2026-06-08T16:16:40.087","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-43951","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.1","integrity_impact":"LOW","description":"A cross-site scripting vulnerability exists in mod_proxy_ftp\"s HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to ...","published":"2026-06-08T16:16:38.093","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2026-29170","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"LOW","description":"HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the ...","published":"2026-05-04T15:16:04.227","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33523","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, ...","published":"2026-05-04T15:16:04.107","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-33007","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"HIGH","base_score":"4.8","integrity_impact":"LOW","description":"A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue.","published":"2026-05-04T15:16:03.977","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33006","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","published":"2026-05-04T14:16:33.447","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-34032","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","published":"2026-05-04T14:16:33.253","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33857","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.4","integrity_impact":"LOW","description":"mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP ...","published":"2025-12-05T11:15:52.747","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2025-66200","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"LOW","description":"Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue ...","published":"2025-12-05T11:15:52.497","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-65082","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.3","integrity_impact":"LOW","description":"HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, ...","published":"2024-04-04T20:15:08.663","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"REQUIRED","name":"CVE-2024-24795","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"HIGH","base_score":"5.9","integrity_impact":"NONE","has_exploit":true,"description":"When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request\"s memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, ...","published":"2023-10-23T07:15:11.330","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-45802","match_type":"cpe","confidentiality_impact":"NONE","exploit_links":["https://github.com/MehranTurk/CVE-2023-45802"],"match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"LOW","description":"Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be ...","published":"2023-01-17T20:15:11.670","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-37436","match_type":"cpe","confidentiality_impact":"NONE","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and ...","published":"2022-06-09T17:15:09.180","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-28614","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.","published":"2022-06-09T17:15:09.133","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-28330","match_type":"cpe","confidentiality_impact":"LOW","match_product":"Apache 2.4.52"}],"@timestamp":"2026-08-18T21:49:30.458Z","whois":{"related_nets":[{"start_ip":"182.176.2.0","description":"Pakistan Telecommuication company limited\n CDDT Building, H-9/1, Training Block\n Pakistan Telecommunication Company Limited\n GM, Multimedia & Broadband","range":"182.176.2.0 - 182.176.2.255","cidr":["182.176.2.0/24"],"net_size":255,"end_ip":"182.176.2.255","updated":"2020-07-28T04:30:45Z"},{"start_ip":"182.176.2.0","description":"Pakistan Telecommuication company limited\n CDDT Building, H-9/1, Training Block\n Pakistan Telecommunication Company Limited\n GM, Multimedia & Broadband","range":"182.176.2.0 - 182.176.2.255","cidr":["182.176.2.0/24"],"net_size":255,"end_ip":"182.176.2.255","updated":"2020-04-22T04:33:20Z"},{"start_ip":"182.176.2.0","description":"Pakistan Telecommuication company limited\n CDDT Building, H-9/1, Training Block\n Pakistan Telecommunication Company Limited\n GM, Multimedia & Broadband","range":"182.176.2.0 - 182.176.2.255","cidr":["182.176.2.0/24"],"net_size":255,"end_ip":"182.176.2.255","updated":"2020-07-28T04:42:37Z"}],"net":{"country":"PK","address":"General Manager,\nPakistan Telecommunication Company Limited.\nH-9/1, CDDT Building, Training Block\nIslamabad, Pakistan","description":"Pakistan Telecommuication company limited\nCDDT Building, H-9/1, Room No. 15, Training Block\nIslamabad, Pakistan","range":"182.176.0.0 - 182.191.255.255","handle":"AP1078-AP","organization":"ORG-PTCL1-AP","name":"PTCLBB-PK","start_ip":"182.176.0.0","net_size":1048575,"cidr":["182.176.0.0/12"],"updated":"2021-01-20T22:25:08Z","end_ip":"182.191.255.255","contacts":{"emails":["abuse.irt@ptcl.net","csirt@ptcl.net","munir.ahmed@ptcl.net.pk","yasir.ahmad@ptcl.net.pk"],"persons":["Munir Ahmed"],"phones":["+92-51-4430380","+000000000","+92-51-4865412"]}},"asn":{"registry":"apnic","number":["17557"],"country":"PK","name":"PKTELECOM-AS-PK - Pakistan Telecommunication Company Limited","cidr":"182.176.0.0/12","updated":"2010-04-12"}},"port":8333,"host":"182.176.111.218","http":{"headers":{"date":["Tue, 18 Aug 2026 21:47:32 GMT"],"server":["Apache/2.4.52 (Ubuntu)"],"set_cookie":["XSRF-TOKEN=eyJpdiI6IkY3Z2pqTXZaUytlNC80djlQV0NaL0E9PSIsInZhbHVlIjoiVHdCSGNNKzVVcUFNUGpuRFp4WDRiMUZaM0NOK3FJVzhmWUo5MkpxQi8xTkhXdm5NNWFPZ1dUWXZaYU5yYzZVU1owRExKOHZPRGRjbzMxakgyOEZqUXJGQ1BHd1lJdzgvdnp5bldVN2xaZExieDJUVHJGencxR3lJWUQ2bFJNZ3IiLCJtYWMiOiI0MzJhZmFjNTk1NzU3MDIxNGNlOTlkZjA0YTFmZDk3MDE3NTc2MGUzOGNiMjY5NzRlYmE0YWQ1NjI1ZjQxMjQxIiwidGFnIjoiIn0%3D; expires=Tue, 18 Aug 2026 23:47:32 GMT; Max-Age=7200; path=/; secure; samesite=lax","masoomeen_session=eyJpdiI6InRRT0cydklXSlhhS0FEempUaXRaRnc9PSIsInZhbHVlIjoiSXZWcUV6T3JoVTdvbGxIdmdva0NKbjhjUzg5UCtYUEpBZW9LbVJCeWdPSjNjdG1lTHpneWRodHAweWtOWTN4YXNlUmwwditIZWZYTW0vVjFBdXM1TyttQWNFTDBLYnJXM2RFNCtIKzYyNnFiQ1VxOVp6UklHRkVoRW14TkxzbUIiLCJtYWMiOiIyYTFjMDYxZjIzM2VhZjRiZmUyMjZhYTZmOWY1ZDI0N2E3MDFiMTJlNzQ0NTdlYzVkOTFiZWRiMDMzOGY4ZGU1IiwidGFnIjoiIn0%3D; expires=Tue, 18 Aug 2026 23:47:32 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax"],"content_type":["text/html; charset=UTF-8"],"vary":["Accept-Encoding"],"cache_control":["no-cache, private"]},"status_code":200,"transfer_encoding":["chunked"],"body_sha256":"acda5bde00bdbe99c7c75a75b3318fbd351b640f61c2457a35b53e8a7012ad34","meta":["charset=\"utf-8\"","name=\"viewport\" content=\"width=device-width, initial-scale=1\""],"body":"\n\n\n\n \n \n\n Masoomeean\n\n \n \n \n\n \n \n\n\n\n
    \n \n \n
    \n
    \n \n
    \n \n
    \n \n
    \n\n
    \n\n
    \n\n
    \n Masoomeean Foundation (2025)\n \n
    \n
    \n
    \n \n\n\n\n","status_line":"200 OK","title":"Masoomeean","version":"1.1","content_length":-1},"tag":[{"ubuntu":{"version":""},"name":"ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","cpe":["cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*"],"fullname":"Ubuntu","category":["Operating systems"]},{"name":"apache_http_server","description":"Apache is a free and open-source cross-platform web server software.","cpe":["cpe:2.3:a:apache:http_server:2.4.52:*:*:*:*:*:*:*"],"fullname":"Apache HTTP Server","category":["Web servers"],"apache_http_server":{"version":"2.4.52"}},{"apache":{"version":"2.4.52"},"name":"apache","description":"Apache is a free and open-source cross-platform web server software.","cpe":["cpe:2.3:a:apache:http_server:2.4.52:*:*:*:*:*:*:*"],"fullname":"Apache","category":["Web servers"]}],"scan_date":"2026-08-07"},"scan_label":"2026-08-07"},{"data":{"isp":"Huawei Cloud","ip":"182.160.16.234","certificate":{"issuer_dn":"DC=vsphere, DC=local, C=NP, O=ONNLEAJT, CN=localhost, OU=VMware Engineering, DC=vsphere, DC=local","fingerprint_md5":"ea83e145a006841d79ac255cb4272372","src":"https://182.160.16.234:8333/","signature":{"valid":true,"signature_algorithm":{"name":"SHA512-RSA","oid":"1.2.840.113549.1.1.13"},"value":"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","self_signed":true},"redacted":false,"subject":{"country":["NP"],"domain_component":["vsphere","local"],"organization":["ONNLEAJT"],"common_name":["localhost"],"organizational_unit":["VMware Engineering"]},"serial_number":"2800856825203809487","version":3,"issuer":{"country":["NP"],"domain_component":["vsphere","local"],"organization":["ONNLEAJT"],"common_name":["localhost"],"organizational_unit":["VMware Engineering"]},"tbs_noct_fingerprint":"91694c01b5434a872f465044e532130e9fecfa913b83bec3ee388aa3a8a47616","fingerprint_sha256":"da057f2362f54fe9aea66bbeeadf5c194f33ab6b45bbfb00ddd24bee84d60e24","tbs_fingerprint":"91694c01b5434a872f465044e532130e9fecfa913b83bec3ee388aa3a8a47616","extensions":{"key_usage":{"digital_signature":true,"certificate_sign":true,"value":33},"basic_constraints":{"is_ca":false},"extended_key_usage":{"client_auth":true,"server_auth":true}},"subject_dn":"DC=vsphere, DC=local, C=NP, O=ONNLEAJT, CN=localhost, OU=VMware Engineering, DC=vsphere, DC=local","fingerprint_sha1":"7431d68191996d3a6747cefff4db93a8903efbed","spki_subject_fingerprint":"f6cbc006d9e8ae91baf3544dca75881ff13e39e14092e8be865a0e17a9a7a627","validity":{"length":315619200,"start":"2026-07-22T16:52:46Z","end":"2036-07-22T16:52:46Z"},"validation_level":"unknown"},"uri":"https://182.160.16.234:8333/","host_type":"ip","target":{"ip":"182.160.16.234","type":"ip"},"prot7":"http","geo":{"continent":"Asia","country":"SG","tz":"Asia/Singapore","accuracy":50,"location":{"lon":103.8014,"lat":1.3673},"registered_country":"SG"},"path":"/","protocol":"https","prot4":"tcp","cve":[{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"Improper Neutralization of Special Elements used in an SQL Command (\"SQL Injection\") vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before ...","published":"2026-05-20T20:16:41.230","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-9082","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/HORKimhab/CVE-2026-9082","https://github.com/lysophavin18/cve-2026-9082","https://github.com/0xBlackash/CVE-2026-9082","https://github.com/7h30th3r0n3/CVE-2026-9082-Drupal-PoC","https://github.com/ywh-jfellus/CVE-2026-9082","https://github.com/ridhinva/drupal-jsonapi-sqli-scanner","https://github.com/N45HT/drupal-cve-2026-9082-checker","https://github.com/ambionics/cve-2026-9082-drupal-postgresql-rce","https://github.com/strobelpierre/CVE-2026-9082","https://github.com/thinhap/CVE-2026-9082-PoC","https://github.com/11romain/CVE-2026-9082","https://github.com/sourcecode347/CVE-2026-9082-Mass_Scanner"],"match_product":"Drupal"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.5","integrity_impact":"HIGH","description":"Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, ...","published":"2025-03-31T22:15:19.893","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-31674","match_type":"product","confidentiality_impact":"HIGH","match_product":"Drupal"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9. Drupal core contains a chain of methods that is ...","published":"2024-12-10T00:15:22.770","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-55638","match_type":"product","confidentiality_impact":"HIGH","match_product":"Drupal"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is ...","published":"2024-12-10T00:15:22.650","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-55637","match_type":"product","confidentiality_impact":"HIGH","match_product":"Drupal"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is ...","published":"2024-12-10T00:15:22.540","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-55636","match_type":"product","confidentiality_impact":"HIGH","match_product":"Drupal"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"HIGH","description":"A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.","published":"2024-12-10T00:15:22.323","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2024-55634","match_type":"product","confidentiality_impact":"HIGH","match_product":"Drupal"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8.","published":"2024-12-05T15:15:08.340","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-11941","match_type":"product","confidentiality_impact":"NONE","match_product":"Drupal"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service (DoS) condition.","published":"2024-01-16T04:15:07.993","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-22362","match_type":"product","confidentiality_impact":"NONE","match_product":"Drupal"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.5","integrity_impact":"HIGH","description":"In certain scenarios, Drupal\"s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only ...","published":"2023-09-28T19:15:10.977","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-5256","match_type":"product","confidentiality_impact":"HIGH","match_product":"Drupal"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.4","integrity_impact":"LOW","description":"Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from ...","published":"2026-07-10T22:16:43.667","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2026-55808","match_type":"product","confidentiality_impact":"LOW","match_product":"Drupal"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-supplied _failure_path parameter when ...","published":"2026-07-14T20:17:09.330","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-48489","match_type":"product","confidentiality_impact":"HIGH","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Crawler::addXmlContent() set DOMDocument::$validateOnParse = true before loadXML(), re-enabling external ...","published":"2026-07-14T20:17:00.370","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-45071","match_type":"product","confidentiality_impact":"HIGH","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"HIGH","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of- ...","published":"2026-07-14T20:17:00.107","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-45068","match_type":"product","confidentiality_impact":"NONE","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.3","integrity_impact":"LOW","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty($_GET), but parse_str() and the web SAPI ...","published":"2026-07-14T19:17:09.237","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-47767","match_type":"product","confidentiality_impact":"HIGH","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\\Component\\Yaml\\Parser::cleanup() used regular expressions with overlapping quantifiers for YAML ...","published":"2026-07-14T19:17:07.187","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-45305","match_type":"product","confidentiality_impact":"NONE","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\\Component\\Yaml\\Parser resolved YAML collection aliases recursively, allowing a small untrusted YAML ...","published":"2026-07-14T19:17:07.050","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-45304","match_type":"product","confidentiality_impact":"NONE","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.2","integrity_impact":"NONE","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the ...","published":"2026-07-14T19:17:06.913","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-45133","match_type":"product","confidentiality_impact":"NONE","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.3","integrity_impact":"HIGH","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped #[IsGranted], #[IsSignatureValid], and #[IsCsrfTokenValid] attributes can be configured for GET only, but ...","published":"2026-07-14T19:17:06.650","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-45075","match_type":"product","confidentiality_impact":"LOW","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.8","integrity_impact":"LOW","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered audience (aud), issuer (iss), and expiry (exp) checkers but did not pass ...","published":"2026-07-14T19:17:06.017","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-45069","match_type":"product","confidentiality_impact":"HIGH","match_product":"Symfony"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $_SERVER[\"SSL_CLIENT_S_DN\"] with an unanchored regex that ...","published":"2026-07-14T19:17:05.620","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-45063","match_type":"product","confidentiality_impact":"HIGH","match_product":"Symfony"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; ...","published":"2026-07-21T22:19:09.667","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-62574","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, ...","published":"2026-07-21T22:17:12.190","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-47063","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.4","integrity_impact":"HIGH","description":"Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple ...","published":"2026-07-21T22:17:11.600","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-47058","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols ...","published":"2026-07-21T22:17:11.483","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-47057","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, ...","published":"2026-04-21T21:16:32.643","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-34282","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, ...","published":"2026-04-21T21:16:28.470","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-22016","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/George0Papasotiriou/CVE-2026-22016-IPFS-CID-Spoofing-via-Multihash-Length-Extension"],"match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, ...","published":"2026-01-20T22:15:57.390","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-21945","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.4","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, ...","published":"2026-01-20T22:15:55.793","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2026-21932","match_type":"product","confidentiality_impact":"NONE","match_product":"Java"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle ...","published":"2025-10-21T20:20:47.177","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-53066","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.1","integrity_impact":"HIGH","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; ...","published":"2025-07-15T20:15:47.013","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-50106","match_type":"product","confidentiality_impact":"HIGH","match_product":"Java"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.1","integrity_impact":"HIGH","description":"An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler (rb_getaddrinfo in ext/socket/raddrinfo.c) allows a remote attacker who can delay DNS responses near the user- ...","published":"2026-05-22T18:16:22.927","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-46727","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ruby"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, \"root.Open(\"symlink/\")\" will open \"symlink\" ...","published":"2026-07-08T17:17:21.310","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-39822","match_type":"product","confidentiality_impact":"HIGH","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library\"s HTTP/2 implementation (CVE-2023-44487 / CVE-2023-39325, the \"Rapid Reset\" technique). A remote ...","published":"2026-06-23T13:16:30.420","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-54365","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"7.5","integrity_impact":"HIGH","description":"A malicious module proxy can exploit a flaw in the go command\"s validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy (GOMODPROXY) or checksum database (GOSUMDB). A ...","published":"2026-05-07T20:16:44.643","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"REQUIRED","name":"CVE-2026-42501","match_type":"product","confidentiality_impact":"HIGH","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.","published":"2026-05-07T20:16:44.540","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-42499","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).","published":"2026-05-07T20:16:43.593","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-39836","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.","published":"2026-05-07T20:16:43.187","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-39820","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.","published":"2026-05-07T20:16:42.880","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33814","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.","published":"2026-05-07T20:16:42.770","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33811","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.2","integrity_impact":"LOW","description":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate ...","published":"2026-04-08T02:16:03.950","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33810","match_type":"product","confidentiality_impact":"HIGH","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.","published":"2026-04-08T02:16:03.580","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-32283","match_type":"product","confidentiality_impact":"NONE","match_product":"Go"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large ...","published":"2024-02-10T05:15:08.650","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-21490","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/RoninForge/roninforge-angularjs-migration"],"match_product":"AngularJS"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"HIGH","has_exploit":true,"description":"Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.","published":"2026-07-30T12:17:27.347","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-17544","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Boreas37/CVE-2026-17544-PoC","https://github.com/r2qa/CVE-2026-17544"],"match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.1","integrity_impact":"HIGH","has_exploit":true,"description":"Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.","published":"2026-07-30T12:17:27.120","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-17543","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/pratham220/CVE-2026-17543-PHP-Exposure-Validator","https://github.com/Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout"],"match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.3","integrity_impact":"HIGH","has_exploit":true,"description":"In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) ...","published":"2026-05-10T05:16:11.213","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-6735","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/php/php-src/security/advisories/GHSA-7qg2-v9fj-4mwv"],"match_product":"PHP"},{"severity":"CRITICAL","attack_complexity":"HIGH","base_score":"9.5","integrity_impact":"HIGH","description":"In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension\"s object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When ...","published":"2026-05-10T05:16:11.070","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-6722","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.4","integrity_impact":"HIGH","description":"In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing ...","published":"2026-05-10T05:16:09.853","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"ACTIVE","name":"CVE-2025-14179","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"HIGH","base_score":"8.2","integrity_impact":"NONE","has_exploit":true,"description":"In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \\x99) in a ...","published":"2025-12-27T20:15:40.717","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-14180","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwj"],"match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.2","integrity_impact":"LOW","description":"In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, ...","published":"2025-12-27T20:15:40.570","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-14178","match_type":"product","confidentiality_impact":"NONE","match_product":"PHP"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string ...","published":"2025-07-13T23:15:22.940","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-1735","match_type":"product","confidentiality_impact":"NONE","match_product":"PHP"},{"severity":"CRITICAL","attack_complexity":"HIGH","base_score":"9.2","integrity_impact":"HIGH","has_exploit":true,"description":"In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example ...","published":"2025-04-04T18:15:48.020","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-11235","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477","https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477"],"match_product":"PHP"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further ...","published":"2025-02-12T22:15:29.007","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2022-31631","match_type":"product","confidentiality_impact":"HIGH","match_product":"PHP"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"Gitea does not properly validate repository ownership when linking attachments to releases. An attachment uploaded to a private repository could potentially be linked to a release in a different public repository, making it accessible to unauthorized ...","published":"2026-01-22T22:16:19.297","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20912","match_type":"product","confidentiality_impact":"HIGH","match_product":"Gitea"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories.","published":"2026-01-22T22:16:18.960","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20897","match_type":"product","confidentiality_impact":"HIGH","match_product":"Gitea"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"Gitea does not properly validate project ownership in organization project operations. A user with project write access in one organization may be able to modify projects belonging to a different organization.","published":"2026-01-22T22:16:17.370","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20750","match_type":"product","confidentiality_impact":"HIGH","match_product":"Gitea"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different ...","published":"2026-01-22T22:16:17.207","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20736","match_type":"product","confidentiality_impact":"NONE","match_product":"Gitea"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"HIGH","description":"Gitea does not properly validate ownership when toggling OpenID URI visibility. An authenticated user may be able to change the visibility settings of other users\" OpenID identities.","published":"2026-01-22T22:16:19.130","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20904","match_type":"product","confidentiality_impact":"NONE","match_product":"Gitea"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"4.3","integrity_impact":"NONE","description":"Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able to cancel auto-merges scheduled by other users.","published":"2026-01-22T22:16:17.890","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20888","match_type":"product","confidentiality_impact":"LOW","match_product":"Gitea"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"NONE","description":"Gitea\"s stopwatch API does not re-validate repository access permissions. After a user\"s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.","published":"2026-01-22T22:16:17.713","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20883","match_type":"product","confidentiality_impact":"HIGH","match_product":"Gitea"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.5","integrity_impact":"NONE","description":"Gitea\"s notification API does not re-validate repository access permissions when returning notification details. After a user\"s access to a private repository is revoked, they may still view issue and pull request titles through previously received ...","published":"2026-01-22T22:16:17.540","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-20800","match_type":"product","confidentiality_impact":"HIGH","match_product":"Gitea"},{"severity":"LOW","attack_complexity":"LOW","base_score":"3.5","integrity_impact":"NONE","description":"Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, ...","published":"2026-01-22T22:16:15.957","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"REQUIRED","name":"CVE-2026-0798","match_type":"product","confidentiality_impact":"LOW","match_product":"Gitea"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"NONE","description":"In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.","published":"2026-01-01T05:16:03.907","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-69413","match_type":"product","confidentiality_impact":"LOW","match_product":"Gitea"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.4","integrity_impact":"HIGH","description":"Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item\"s size times its repeat count to a running total with no overflow check, so a large ...","published":"2026-07-13T17:17:55.670","attack_vector":"LOCAL","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-57432","match_type":"product","confidentiality_impact":"HIGH","match_product":"Perl"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","description":"Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are combined into a trie, the delta between ...","published":"2026-07-13T17:16:48.923","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-13221","match_type":"product","confidentiality_impact":"NONE","match_product":"Perl"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than ...","published":"2026-05-26T00:16:57.150","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-8376","match_type":"product","confidentiality_impact":"HIGH","match_product":"Perl"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable ...","published":"2026-03-29T21:16:15.717","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-4176","match_type":"product","confidentiality_impact":"HIGH","match_product":"Perl"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.4","integrity_impact":"HIGH","description":"A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, ...","published":"2025-04-13T14:15:14.527","attack_vector":"LOCAL","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-56406","match_type":"product","confidentiality_impact":"HIGH","match_product":"Perl"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell (`cmd.exe`). When running an executable that uses the Windows Perl interpreter, Perl attempts to find ...","published":"2024-01-02T06:15:13.737","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-47039","match_type":"product","confidentiality_impact":"HIGH","match_product":"Perl"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.8","integrity_impact":"HIGH","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.","published":"2023-12-18T14:15:08.933","attack_vector":"LOCAL","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2023-47038","match_type":"product","confidentiality_impact":"HIGH","match_product":"Perl"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.","published":"2023-08-22T19:16:31.153","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-48522","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c#L16336-L16345"],"match_product":"Perl"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.7","integrity_impact":"NONE","description":"The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.","published":"2026-07-09T17:16:58.260","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-15308","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.0","integrity_impact":"HIGH","description":"The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().","published":"2026-03-20T15:16:24.057","attack_vector":"LOCAL","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"ACTIVE","name":"CVE-2026-4519","match_type":"product","confidentiality_impact":"HIGH","match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.","published":"2024-09-03T13:15:05.363","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-6232","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/python/cpython/issues/121285","https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers"],"match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"There is a LOW severity vulnerability affecting CPython, specifically the \"http.cookies\" standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with ...","published":"2024-08-19T19:15:08.180","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-7592","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/python/cpython/issues/123067"],"match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"An issue was discovered in Python 3.11 through 3.11.4. If a path containing \"\\0\" bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first \"\\0\" byte. There are plausible cases in which an application would have ...","published":"2023-08-23T07:15:08.590","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2023-41105","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","has_exploit":true,"description":"An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.","published":"2023-08-22T19:16:32.007","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-48565","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://bugs.python.org/issue42051","https://github.com/Einstein2150/CVE-2022-48565-POC"],"match_product":"Python"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"A use-after-free exists in Python through 3.9 via heappushpop in heapq.","published":"2023-08-22T19:16:31.827","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2022-48560","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://bugs.python.org/issue39421"],"match_product":"Python"},{"severity":"LOW","attack_complexity":"LOW","base_score":"2.0","integrity_impact":"LOW","description":"In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing ...","published":"2026-06-30T15:16:57.193","attack_vector":"NETWORK","privileges_required":"HIGH","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-4360","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"MEDIUM","attack_complexity":"HIGH","base_score":"6.3","integrity_impact":"NONE","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to ...","published":"2026-05-11T18:16:42.413","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-7210","match_type":"product","confidentiality_impact":"NONE","match_product":"Python"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.0","integrity_impact":"HIGH","has_exploit":true,"description":"If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected ...","published":"2026-04-27T21:16:42.480","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-3087","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/python/cpython/issues/146581"],"match_product":"Python"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` data in `GenericInlineModelAdmin`. Earlier, unsupported Django series ...","published":"2026-04-07T15:17:46.500","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-4277","match_type":"product","confidentiality_impact":"HIGH","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"HIGH","description":"An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `ASGIRequest` allows a remote attacker to spoof headers by exploiting an ambiguous mapping of two header variants (with hyphens or with underscores) to a single ...","published":"2026-04-07T15:17:46.353","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-3902","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit when reading `HttpRequest.body`, allowing ...","published":"2026-04-07T15:17:39.393","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33034","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode ...","published":"2026-03-03T15:16:19.103","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-25673","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `django.utils.text.Truncator.chars()` and `Truncator.words()` methods (with `html=True`) and the `truncatechars_html` and `truncatewords_html` template filters allow ...","published":"2026-02-03T15:16:13.570","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-1285","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `ASGIRequest` allows a remote attacker to cause a potential denial-of-service via a crafted request with multiple duplicate headers. Earlier, unsupported Django ...","published":"2026-02-03T15:16:11.750","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-14550","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. Algorithmic complexity in `django.core.serializers.xml_serializer.getInnerText()` allows a remote attacker to cause a potential denial-of-service attack triggering ...","published":"2025-12-02T16:15:56.013","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-64460","match_type":"product","confidentiality_impact":"NONE","match_product":"Django"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.1","integrity_impact":"HIGH","has_exploit":true,"description":"An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted ...","published":"2025-11-05T15:15:41.080","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2025-64459","match_type":"product","confidentiality_impact":"HIGH","exploit_links":["https://shivasurya.me/security/django/2025/11/07/django-sql-injection-CVE-2025-64459.html","https://github.com/rockmelodies/django_sqli_target_CVE-2025-64459","https://github.com/nunpa/CVE-2025-64459","https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed","https://github.com/0xCyberstan/CVE-2025-64459-Poc","https://github.com/Z3YR0xX/CVE-2025-64459","https://github.com/alxsourin/Helpdesk-Telecom-CVE-2025-64459","https://github.com/purehate/CVE-2025-64459-hunter","https://github.com/joshualent/django-cve-2025-64459","https://github.com/rafaelchriss/RedTeamBrasil-CVE-2025-64459","https://github.com/YouGina/CVE-2025-64459"],"match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","has_exploit":true,"description":"An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut ...","published":"2025-11-05T15:15:40.940","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-64458","match_type":"product","confidentiality_impact":"NONE","exploit_links":["https://github.com/ch4n3-yoon/CVE-2025-64458-Demo"],"match_product":"Django"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably ...","published":"2025-10-01T19:15:36.487","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2025-59681","match_type":"product","confidentiality_impact":"HIGH","match_product":"Django"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"8.0","integrity_impact":"HIGH","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage\"s `DiskService#path_for` does not validate that the resolved filesystem path remains within the storage ...","published":"2026-03-24T00:16:28.987","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33195","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ruby on Rails"},{"severity":"CRITICAL","attack_complexity":"LOW","base_score":"9.8","integrity_impact":"HIGH","description":"Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and ...","published":"2024-06-04T20:15:10.237","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-28103","match_type":"product","confidentiality_impact":"HIGH","match_product":"Ruby on Rails"},{"severity":"HIGH","attack_complexity":"LOW","base_score":"7.5","integrity_impact":"NONE","description":"Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatch. This vulnerability is patched in 7.1.3.1. Ruby 3.2 has mitigations for this problem, so ...","published":"2024-02-27T16:15:46.600","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2024-26142","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"LOW","attack_complexity":"LOW","base_score":"2.3","integrity_impact":"NONE","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage\"s proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with ...","published":"2026-03-26T22:16:29.387","attack_vector":"NETWORK","privileges_required":"LOW","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33658","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.6","integrity_impact":"HIGH","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage\"s `DiskService#delete_prefixed` passes blob keys directly to `Dir.glob` without escaping glob ...","published":"2026-03-24T00:16:29.157","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"NONE","name":"CVE-2026-33202","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.6","integrity_impact":"NONE","description":"Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number helpers accept strings containing scientific notation (e.g. `1e10000`), ...","published":"2026-03-24T00:16:28.807","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33176","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.6","integrity_impact":"NONE","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Storage\"s proxy delivery mode, the proxy controller loads the entire requested byte ...","published":"2026-03-24T00:16:28.630","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"HIGH","user_interaction":"NONE","name":"CVE-2026-33174","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"LOW","description":"Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary metadata from the client and persists it on the blob. Because internal flags ...","published":"2026-03-24T00:16:28.457","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-33173","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"5.3","integrity_impact":"LOW","description":"Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `SafeBuffer#%` does not propagate the `@html_unsafe` flag to the newly created buffer. If a ...","published":"2026-03-24T00:16:28.287","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"NONE","user_interaction":"PASSIVE","name":"CVE-2026-33170","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"},{"severity":"MEDIUM","attack_complexity":"LOW","base_score":"6.9","integrity_impact":"NONE","description":"Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. `NumberToDelimitedConverter` uses a lookahead-based regular expression with `gsub!` to insert thousands delimiters. Prior to versions 8.1.2.1, ...","published":"2026-03-24T00:16:28.113","attack_vector":"NETWORK","privileges_required":"NONE","availability_impact":"LOW","user_interaction":"NONE","name":"CVE-2026-33169","match_type":"product","confidentiality_impact":"NONE","match_product":"Ruby on Rails"}],"@timestamp":"2026-08-18T21:37:57.657Z","whois":{"abuse":"hwssecurity@huaweicloud.com","related_nets":[{"start_ip":"182.160.16.0","description":"HUAWEI INTERNATIONAL PTE. LTD.\n 15A Changi Business Park Central 1 Eightrium #03-03/04","range":"182.160.16.0 - 182.160.16.255","net_size":255,"cidr":["182.160.16.0/24"],"updated":"2025-01-16T07:01:17Z","end_ip":"182.160.16.255"}],"net":{"country":"ZA","address":"15A Changi Business Park Central 1 Eightrium","start_ip":"182.160.16.0","name":"Huawei-Cloud-SouthAfrica","description":"Huawei Cloud South Africa Region","range":"182.160.16.0 - 182.160.17.255","net_size":511,"handle":"AH905-AP","cidr":["182.160.16.0/23"],"updated":"2024-07-29T06:58:17Z","end_ip":"182.160.17.255","contacts":{"emails":["hwssecurity@huaweicloud.com","wanggang222@huawei.com"],"phones":["+000000000","+8618730601505"]}},"asn":{"registry":"apnic","number":["136907"],"country":"SG","name":"HWCLOUDS-AS-AP - HUAWEI CLOUDS","cidr":"182.160.16.0/24","updated":"2010-03-31"}},"port":8333,"host":"182.160.16.234","http":{"headers":{"x_powered_by":["Xeora"],"date":["Tue, 18 Aug 2026 21:35:14 GMT"],"server":["Tengine/2.3.0"],"x_generator":["Drupal 8 (https://www.drupal.org)"],"x_server_powered_by":["Engintron"],"x_fastly_request_id":["ed15bdb8f4d9179ebe5b6b8441d6148a4a8e213f"],"x_permitted_cross_domain_policies":["none"],"x_drupal_dynamic_cache":["MISS"],"x_cache":["miss"],"content_type":["text/html;charset=utf-8"],"x_content_type_options":["nosniff"],"set_cookie":["ASPSESSIONIDQCSASBTR=HLDNOCJAHHEGLOAADJAGCLLB; path=/","jeesite.session.id=n811avhi2gnvn1mlvv7572hkc; path=/; i_like_gogs=; i_like_gitea=; harbor-lang=; atmail6=; a=phpMyAdmin; b=/pma_lang; HttpOnly","roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095","CNOAOASESSID=n811avhi2gnvn1mlvv7572hkc; path=/; HttpOnly","Cacti=o6vomb0hujscvd9qh7icd0b6m6; path=/","ISESSIONID=n811avhi2gnvn1mlvv7572hkc; path=/; HttpOnly","fsm_u=admin; Path=/;","adscsrf=66a8d8fd-ffe2-422b-bf08-37b6297afc4f;path=/;SameSite=None;Secure;priority=high;","SUPPORTCHROMEOS=1; path=/; secure;","SESSID=22363a2bf; path=/;","DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure;","SID=hBc7TxF76ERhvIw0jQQ4LZ7Z1jQUV0tQ; path=/;","wordpress_7400f7aab75991b599187e939d89d69c=admin%7C1737500088%7CGAmx1zdDUU%7C70307dfb; path=/wp-admin; HttpOnly","MEDDREAMSESSID=n811avhi2gnvn1mlvv7572hkc; path=/; HttpOnly","grafana_session_expiry=1990089920; Path=/; Max-Age=2592000; SameSite=Lax","ISMS_8700_Sessionname=A67B8F9C228E095723A97C6A977BE2B3; Path=/; HttpOnly","NSC_AAAC=a29d421feecf680a560a4c47b269b38ea29d421feecf680a560a4c47b269b38ea; path=/;","XSRF-TOKEN=d15343462320a225902a31c21b2df758;"],"connection":["keep-alive"],"x_xss_protection":["1; mode=block"],"last_modified":["Fri, 29 Jul 2022 16:53:01 GMT"],"content_length":["234739"],"x_cache_hits":["0"],"x_timer":["S1579233182.306174,VS0,VE0"],"x_jenkins_session":["f72d6619"],"x_ruxit_js_agent":["true"],"pragma":["private"],"x_aspnet_version":["4.0.30319"],"x_varnish_cache":["Miss"],"x_contextid":["YQo="],"x_cache_lookup":["MISS from Hello:8080"],"x_content_powered_by":["K2 v2.8.0 (by JoomlaWor"],"x_drupal_cache":["xHIT"],"x_jenkins":["2.121.3"],"x_frame_options":["SAMEORIGIN"]},"status_code":200,"body_sha256":"734b345dfd85e645214a1fadae5216bb26b681454778e1424c3a0eea40789bd5","meta":["http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" ","http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"","http-equiv=\"Pragma\" content=\"no-cache\" ","charset=\"utf-8\"","content=\"IE=edge\" http-equiv=\"X-UA-Compatible\"","content=\"object\" property=\"og:type\"","content=\"GitLab\" property=\"og:site_name\"","content=\"Help\" property=\"og:title\"","content=\"GitLab Community Edition\" property=\"og:description\"","content=\"summary\" property=\"twitter:card\"","content=\"Help\" property=\"twitter:title\"","content=\"GitLab Community Edition\" property=\"twitter:description\"","content=\"GitLab Community Edition\" name=\"description\"","content=\"#474D57\" name=\"theme-color\"","content=\"#30353E\" name=\"msapplication-TileColor\"","name=\"csrf-param\" content=\"authenticity_token\" ","name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8ecc96ed938be9be7fed5240d22==\" ","name=\"copyright\" content=\"www.linknat.com, 昆石网络\"","name=\"author\" content=\"www.linknat.com, 昆石网络\"","name=\"application-name\" content=\"OpenRemote\"","name=\"keywords\" content=\"VOS3000, VoIP, VoIP运营支撑系统, 软交换\"","name=\"generator\" content=\"SPIP 4.1.11\" ","http-equiv=refresh content='2; url=/my_certificate.htm'","name=\"generator\" content=\"Roadiz master 1.2.36 - Grame theme v1.2.9\"","name=\"generator\" content=\"MediaWiki 1.41.0\"","name=\"csrf_token\" content=\"e22f76001fa38ce36f9b69bdbd73fbfb0001c399\" ","id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\"","id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\"","id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\"","name=\"generator\" content=\"vBulletin 5.5.4\" ","name=\"confluence-request-time\" content=\"1698802962782\"","name=\"title\" content=\"Document | DBMS | Database | Java | Studio\" ","name=\"description\" content=\"OrientDB Studio\" ","charset=\"UTF-8\"","http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"","name=\"author\" content=\"Gogs\"","name=\"csrf\" content=\"5dcb6c64bdf61e38dbdbb941c1d69789c560d0fb\"","name=\"description\" content=\"Blinko self-hosted personal note\"","name=\"csrf-token\" content=\"12eef1d88692f7673fb80ab6ba8d051fdce64ccb\"","name=\"n8n:config:rest-endpoint\" content=\"cmVzdA==\"","name=\"n8n:config:sentry\" content=\"eyJkc24iOiIiLCJlbnZpcm9ubWVudCI6ImRldmVsb3BtZW50IiwicmVsZWFzZSI6Im44bkAxLjEyMC4zIn0=\"","name=\"keywords\" content=\"about, mod_cluster, mod_proxy_cluster, load, balancer, Mod_cluster Status, Protocol supported\"","content=\"MSHTML 6.00.2900.5583\" name=\"GENERATOR\"","name=\"description\" content=\"Build Your Own Botnet\" "],"tracker":{"google_analytics":["G-IP","GT-AC5300"]},"unknown_headers":[{"value":["Batcache"],"key":"x_nananana"},{"value":["aaefbbcd"],"key":"x_highwire_sessionid"},{"value":["root"],"key":"x_cmd_response"},{"value":["4294967294"],"key":"x_nextjs_stale_time"},{"value":["localhost"],"key":"osd_name"},{"value":["=deleteMe|rememberMe= 360wzws|CWAP-waf|zhuji.360.cn|X-Safe-Firewall AkamaiGHost Anquanbao Basic realm=\"dubbo\" BigIP|BIGipServer binarysec BlockDos.net client_param=install_active cloudflare cloudfront Cneonction|nnCoection|citrix_ns_id dotDefender ecology_JSessionid EMobileServer 华夏ERP JBoss jsluid= laravel_session linksys-vpn Mod_Security|NOYB Nagios Access nagios admin newdefend NSFocus Protected by COMODO Safe3WAF|Safe3 Web Firewall Safedog|WAF/2.0 Secure Entry Server sessioncookie= SonicWALL Sucuri/Cloudproxy ThinkPHP varnish wallarm WebKnight WebLogic webvpn X-Backside-Transport X-CDN|Incapsula X-Confluence X-Mapping- YUNDUN yunjiasu yunsuo zhuji.360.cn"],"key":"x_fsc"},{"value":["93.123.109.21"],"key":"loginip"},{"value":["SPIP 4.1.11 @ www.spip.net"],"key":"composed_by"},{"value":["1"],"key":"x_nextjs_prerender"},{"value":["5"],"key":"x_ne_tf"}],"description":"OrientDB Studio","body":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nUbiquiti Networks\n\n\n
    \nGoAnywhere Managed File Transfer（MFT）\nGoAnywhere 7.4.1 - Production\n\na29d421feecf680a680a0fritzr\n\n\n\n\n\n\n\n\n\n\n
    8.5.5 (Build:20200530.307-TEMP)
    \nVersion 2023.11.3 (build 147512)\n

    Logged in as admin

    \n/login/Register\n
    \n
    \n \n \n \n \n \n
    \n \n \n
    \n
    \n \n \n
    \n
    \n \n \n
    \n
    \n \n Too Short\n
    \n
    \n \n
    \n \n \n
    \n
    \n
    \n \n
    \n \n \n
    \n
    \n
    \n \n \n
    \n
    \n
    \n\n\n
    \n
    \n The zip file did not contain an entry exportDescriptor.properties\n \n Please enter your username and password.\n \n \n \n
    The Cacti Group Version 1.2.25
    \n IPFire 2.19 (2017v) - Core Update 110 introduces significant changes\n \n \n \n \n \n \n \n \n \n \n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n \n \n \n \n \n \n \n \n\t\n
    v7.0NG.772.3
    \n
    \n\n
    \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
    \n22.7R2.0\n
    downloadLog_154Log_154
    \n\n
    \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
    \n\n
  • 日志系统
    • \n
  • 云平台
    • \n\n
    RT-AC5300
    \n
    Sign in with your ASUS router account
    \n
    PHP Group
    upload_tmp_dir/etc/httpd/_tmp/etc/httpd/_tmp
    $_SERVER['DOCUMENT_ROOT']/mnt/HDD2/web/
    Please enter your Cacti user name and password below:
    \n

    Activate successfully

    \n

    登入成功!载入中...

    \n
  • \n
    Webroot:/var/www/html
    \n

    \n YSoft SafeQ 6 MU10 | Copyright 2000 - 2025\n Y Soft Corporation, a.s.\n

    \n

    \nmotionEye\nmotionEye Version\nmotionEye Version\n0.43.1b4\n\n\n\n\n\n

    \n\n\n\n\n\n\n
    \n

    \n

    \n\n

    \n\n