CopyFail-Patcher

Patcher script for CVE-2026-31431 This repo provide script for the CopyFail vulnerability, for Debian/Ubuntu/RHEL/Fedora, didn't test on other distros but anyway... Just follow these : $ git clone https://github.com/mhdgning131/CopyFail-Patcher.git $ cd CopyFail-Patcher $ chmod +x patchcopyfail.s...

log4jhound

log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...

CVE-2021-42013

CVE-2021-42013 Description This script exploits CVE-2021-42013 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...

CVE-2021-41773

CVE-2021-41773 Description This script exploits CVE-2021-41773 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...

ProxyShell-CVE-2021-34473.py

ProxyShell-CVE-2021-34473 A simple script to check for ProxyShell...

telnet-CVE-2026-24061

https://github.com/SafeBreach-Labs/CVE-2026-24061/blob/main/telnetrce.py you need to understand the code 2. Building working code without input, directly variable = '' The code must be compatible with every device, so you cannot use commands like os.system'command' 3. Adding a GUI via...

KSK-ITDK-CVE-2026-21509-Mitigation

CVE-2026-21509-Mitigation Powershell script with Detection and Remediation for CVE-2026-21509...

CVE-2026-107337

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

POC-CVE-2025-52970

POC-CVE-2025-52970 python POC-CVE-2025-52970.py -h usage: POC-CVE-2025-52970.py -h -t TARGET | -l LIST options: -h, --help show this help message and exit -t, --target TARGET Single target URL e.g., https://xx.xx.xx.xx -l, --list LIST Path to file containing target URLs, one per line run poc scri...

log4j

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading This script is based from takito1812/log4j-detect By ExodataCyberdefense The script "log4j-detect.py" developed in Python 3 is responsible for detecting whethe...

CVE-2025-49844-discovery

ElastiCache Redis/Valkey Network Analysis Tools Scripts to audit AWS ElastiCache Redis and Valkey clusters for network exposure. Prerequisites AWS CLI configured with appropriate credentials jq installed: brew install jq Scripts list-elasticache-clusters.sh Lists all Redis/Valkey clusters across...

Metabase_Nmap_Script

MetabaseNmapScript It is a nmap script for metabase vulnerability CVE-2021-41277 USAGE -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | State: VULNERABLE Exploitable -- | IDs:...

GravCMS_Nmap_Script

GravCMSNmapScript It is a nmap script for GravCMS vulnerability CVE-2021-21425 USAGE -- nmap -p443 --script gravcms.nse -- PORT STATE SERVICE -- 443/tcp open https -- | gravcms: -- | VULNERABLE: -- | GravCMS CVE-2021-21425 -- | State: VULNERABLE Exploitable -- | IDs: CVE:CVE-2021-21425 --...

CVE-2026-24061

CVE-2026-24061 python3 exploit.py...

CVE-2021-44132

CVE-2021-44132 This script exploits a vulnerability in the OMCISHELL object for C-DATA proprietary routers such as BESTCOM...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

-CVE-2019-9053

-CVE-2019-9053 CMS Simple CVE Recode Script Python 3...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

heartbleed-test

$ python getwebsiteurls.py "searchstring" websites.txt $ sh heartbleed-test.sh websites.txt | tee -a scanresult.log...

GHSA-XW65-4HP5-5HC7 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Summary Handlebars.precompile generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged. HTML parsers recognize even inside a JavaScript string literal, closing the surrounding script element and allowing...