122373 matches found
msxml4-remediation
Corrección de MSXML 4.0 PowerShell Script de PowerShell para remediar hallazgos de seguridad relacionados con Microsoft XML Core Services MSXML 4.0 , que no es compatible y suele ser marcado por los escáneres de vulnerabilidades. Este script que hice anula el registro de los archivos .dll de MSXM...
React2Shell-Vulnerability-Verification-Script
React2Shell Vulnerability Verification Script verifyreactvulnerability.py What is this script? This is a simple, standalone Python script created to help you quickly determine if your project is affected by the critical React2Shell vulnerability also known as CVE-2025-55182. It performs a two-lev...
CVE-2021-26084-patch-
CVE-2021-26084 patch CVE-2021-26084 patch provided by "Confluence Security Advisory - 2021-08-25" this is just a workaround for linux based servers, attlasian has provided a new fixed verssion if you don't want to upgrade just patch it ! instalation download the cve-2021-26084-update file, and ma...
CVE-2011-2523
CVE-2011-2523 usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --version show program'...
CVE-2025-55182-test
CVE-2025-55182 Test Check if your endpoint is potentially vulnerable to CVE-2025-55182. Requirements pip install requests Usage Single target $ python3 react2shell-test.py -u https://app.example.com Multiple targets from file $ python3 react2shell-test.py -l targets.txt With options $ python3...
CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script
CYBERDUDEBIVASH Script de Auditoría de Agentes AI de ServiceNow v1.1 Enero 2026 Asegura tu Futuro con IA – Herramienta de Auditoría de Nivel Empresarial con Actualizaciones 2026 Este script audita Agentes AI de ServiceNow en busca de vulnerabilidades como CVE-2025-12420, brechas de gobernanza y...
CVE-2026-106444
A flaw was found in Handlebars. This vulnerability allows a remote attacker to execute arbitrary script code through Cross-Site Scripting XSS. When an application precompiles untrusted template text and embeds the generated output directly into an inline web script block, static content is not...
MAL-2026-17641 Malicious code in troubleshooting (npm)
troubleshooting is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js...
Malicious code in troubleshooting (npm)
troubleshooting is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js...
MAL-2026-17640 Malicious code in browser-metrics-plugin.contrib (npm)
browser-metrics-plugin.contrib is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install,...
Malicious code in browser-metrics-plugin.contrib (npm)
browser-metrics-plugin.contrib is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install,...
PT-2026-107475
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...
Linux Distros Unpatched Vulnerability : CVE-2026-106575
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened fi...
PT-2026-107558
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 Description A crafted Magick script can cause an opened file pointer to remain unclosed. This behavior allows repeated processing to exhaust available file descriptors, which are limited resources the...
CVE-2025-64392: Improper Neutralization of Input During Web Page Generation
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
CVE-2026-106575: Missing Release of File Descriptor or Handle after Effective Lifetime
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...
CVE-2026-96408: Improper Control of Generation of Code
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...
PT-2026-107562
Name of the Vulnerable Software and Affected Versions LMCache versions 0.5.5 and earlier Description An unauthenticated remote code execution issue exists where remote attackers can execute Python code by sending scripts to the '/run script' endpoint. By leveraging the injected FastAPI app object...
PT-2026-107423
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...