kit4py

2 exploits Active since Aug 2024
CVE-2024-41570 NOMISEC CRITICAL WORKING POC
Havoc 0.7 - Unauthenticated Server-Side Request Forgery via Demon Callback
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.
11 stars
CVSS 9.8
CVE-2024-41570 INTHEWILD CRITICAL WORKING POC
Havoc 0.7 - Unauthenticated Server-Side Request Forgery via Demon Callback
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.
CVSS 9.8