33213 matches found
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 Scanner PoC by @JaGoTu and @zerosum0x0. В этом репозитории Форк сканера rdesktop, который может определить, уязвим ли хост для уязвимости удаленного выполнения кода CVE-2019-0708 Microsoft Windows Remote Desktop Services. Он не должен вызывать отказ в обслуживании, но...
CVE-2020-3452
CVE-2020-3452 Небольшой, глупый валидатор? на Python для CVE-2020-3452 на устройствах CISCO. Новичок в Python, пожалуйста, не убивайте меня. ;- ИСПОЛЬЗОВАНИЕ python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Пожалуйста, используйте этот скрипт толь...
cerbrutus
Cerbrutus Outil de force brute modulaire écrit en Python, pour une pulvérisation de mots de passe très rapide sur SSH, FTP et, dans un avenir proche, d'autres services réseau. À VENIR : SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Merci à @0dayctf, Rondons, Enigma et 001 pour les tests et...
Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708-
Уязвимость удаленного выполнения кода в службах удаленных рабочих столов CVE-2019-0708- rce эксплойт, созданный для работы с pocsuite3 https://github.com/knownsec/pocsuite3 Установите pocsuite 3 по ссылке выше. Если у вас возникнут проблемы, свяжитесь с командой knownsec-404 Не открывайте здесь...
Pymap-Scanner
Pymap-Scanner Fonctionnalités 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Modules d'installation $ Pyqt4 $ Nmap Prérequis tiers +xsltproc +CAPTURE D'ÉCRAN...
CVE-2026-89430
Gitea validated a push mirror's remote address against the migrations allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to git push, so a name that later resolved to a blocked or internal address was still reached. A user with...
CVE-2026-102159
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-101156
A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...
CVE-2026-101027
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
mip22
mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...
urlhunter
o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...
CVE-2026-101157
A stored cross-site scripting (XSS) vulnerability exists that may allow an unauthenticated attacker with adjacent-network access to inject malicious content. This content executes when an authenticated user views the affected content, potentially allowing the attacker to compromise the victim's a...
CVE-2026-101157 Security Advisory 0192
A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...
CVE-2026-101156
A stored cross-site scripting (XSS) vulnerability exists in the affected system, potentially allowing an authenticated, high-privilege administrator to inject malicious content into a configuration. This content can execute in the browser of another authenticated user when they view or compare th...
EUVD-2026-93960
A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...
CVE-2026-101156 Security Advisory 0192
A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...
CVE-2026-102159 Security Advisory 0190
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-102159 Security Advisory 0190
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
EUVD-2026-93956
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-102159
An access-control flaw in the CV-CUE backend allows an unauthenticated network attacker to access functionality intended exclusively for internal services. Exploitation of this vulnerability may result in the exposure of sensitive location information or the disruption of affected services . No s...