3253 matches found
cve-2010-3847
Script para CVE-2010-3847 Diseñado para automatizar el exploit comentado en http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Probado en CentOS 5 x86. El DSO que genera se compila a partir del siguiente código: include include include void attributeconstructor init setuid0;...
CVE-2025-61304
CVE-2025-61304 "Vulnerabilidad de inyección de comandos del sistema operativo en la extensión de ping de Dynatrace ActiveGate hasta la versión 1.016 mediante una dirección IP manipulada" En segundo plano, la extensión de ping utiliza el símbolo del sistema de Windows para realizar el ping. El cam...
PS2
PS2 Un escáner de puertos escrito puramente en PowerShell. Disclaimer Esta herramienta fue diseñada únicamente para fines legales; los usuarios son responsables de asegurar que su uso de esta herramienta cumpla con todas las leyes aplicables. Al usar esta herramienta, usted asume toda la...
bro-shellshock
Detector de ShellShock para Bro Este script detecta la explotación exitosa de la vulnerabilidad de Bash con CVE-2014-6271, apodada "ShellShock". Es más completo que la mayoría de las detecciones existentes, ya que observa el comportamiento del host atacado que podría indicar un compromiso exitoso...
CVE-2025-25706
CVE-2025-25706 Descripción del elemento: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Tipo de vulnerabilidad: Ejecución remota...
CVE-2025-70521
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-70518
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
PT-2026-107525
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
PT-2026-107528
Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2025-70521 Vendor → Unknown Severity → Critical — CVSS 9.8 Product → Unknown Date → 2026-10-07 A critical vulnerability Command Injection has been disclosed affecting Unknown. Patch...
CVE-2025-70521
The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a critical vulnerability in the management portal's diagnostic ping tool . Due to improper neutralization of special elements, the tool fails to handle user-supplied input securely. This allows an unauthenticated attacker to pe...
EUVD-2025-211046
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-70518
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-70521
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-70521
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-70518
The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a command injection vulnerability in the management portal's diagnostic ping tool . Due to insecure handling of user-supplied input, an unauthenticated attacker can inject commands to execute arbitrary code on the underlying An...
CVE-2025-70518
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
EUVD-2025-211049
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-26466-msf
CVE-2025-26466 módulo de Metasploit OpenSSH versiones 9.5p1 a 9.9p1 es vulnerable a un ataque DoS por agotamiento de memoria y CPU mediante el envío repetido de paquetes SSH2MSGPING tipo 192. Esto ocurre antes de la autenticación y puede provocar un bloqueo del servidor debido a un manejo...
CVE-2023-35078
CVE-2023-35078 Este script comprueba éticamente la presencia de cve-2023-35078 solicitando el endpoint /ping de la API de Ivanti EPMM. /ping simplemente responde con la versión de VSP, en lugar de intentar obtener datos de dispositivos o administradores. Uso: ./CVE-2023-35078 Este script asume...
trippy
Trippy combina la funcionalidad de traceroute y ping y está diseñado para ayudar con el análisis de problemas de red. Inicio rápido Consulta la guía de primeros pasos. Instalación Trippy se ejecuta en Linux, BSD, macOS y Windows. Se puede instalar desde la mayoría de los gestores de paquetes,...