68028 matches found
CVE-2025-11833-PoC
CVE-2025-11833 チェッカー python3 main.py --url http://localhost --username admin --loot このリポジトリは教育および研究目的のみで使用されます。作者は不適切な使用について一切の責任を負いません。PoCは常に管理された隔離環境でテストしてください。...
CVE-2026-104874 vulnerabilities
Vulnerabilities for packages: wazuh-manager, py3-cassandra-medusa, mlflow-fips, puppygraph-python, request-1276, authentik, wazuh-manager-fips, airflow, crossplane-function-pythonic, authentik-fips...
GHSA-54P9-H82J-F925 vulnerabilities
Vulnerabilities for packages: wazuh-manager, py3-cassandra-medusa, mlflow-fips, puppygraph-python, request-1276, authentik, wazuh-manager-fips, airflow, crossplane-function-pythonic, authentik-fips...
CVE-2021-21389
使い方 1. Dockerをビルドして、脆弱なWordPress、BuddyPress環境を構築します。 2. MariaDBコンテナをビルドして実行します。 3. 2つのコンテナを同じネットワークで実行するようにします。 例: docker network create wordpressnetwork docker network connect wordpressnetwork wordpressapp docker network connect wordpressnetwork wordpressdb 4. 次のコマンドでペイロードを実行します。 python3...
aiohttp - Directory Traversal
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...
CVE-2026-93616_Checks
安装 将 compromise-check.sh 移动到 Check Point 管理服务器 chmod +x compromise-check.sh Shell 脚本 在 Check Point 管理服务器上以 Expert 模式运行这些命令，从包含 compromise-check.sh 的目录中执行。 SmartDashboard 脚本 smartdashboardrunscript.sh 可以直接从 smartdashboard 运行，方法是进入管理器并点击运行脚本，然后粘贴此代码。 描述 此脚本用于查找添加的 python 脚本、登录尝试以及某些 IP 地址段。...
Scrapegraph-ai v2.3.1
🚀 Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: You Only Scrape Once English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português | Italiano ScrapeGraphAI is a...
rcekit
RCEKit executed means the target executed the input. negative means the probes reached it. Version 3.0.1 · MIT · Python 3.8+ · zero third-party dependencies RCEKit is an RCE detection & confirmation toolkit for authorised penetration testing, red teaming and security research. Point it at a targe...
[SECURITY] Fedora 44 Update: python3.14-3.14.8-1.fc44
Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
cisagov__check-cve-2019-19781.4142e02b
check-cve-2019-19781 🔎🐞 このユーティリティは、ホストが CVE-2019-19781 に対して脆弱かどうかを判定します。 必要条件 Python バージョン 3.6 以上。Python 2 は サポートされていません 。 インストール リリースからの場合: pip install https://github.com/cisagov/check-cve-2019-19781/releases/download/v1.0.1/cve201919781-1.0.1-py3-none-any.whl ソースからの場合: git clone...
XXStrike
XXStrike cat README.md ⚡ XXStrike v2.0 下一代 XSS（跨站脚本）扫描器与模糊测试套件 开发者： Maxod anonmoty 🔰 官方仓库： https://github.com/anonmoty/XXStrike 概述 • 核心特性 • 模块 • 安装 • 使用方法 • 对比 • 免责声明 📌 概述 XXStrike 是一款先进的多线程 跨站脚本（XSS） 检测与漏洞评估框架，专为渗透测试人员、漏洞赏金猎人、应用安全工程师和 DevSecOps 专业人员打造。 作为传统 XSS 扫描器的现代、轻量且高速替代方案，XXStrike 将智能参数发现...
POC_CVE-2025-53558
CVE-2025-53558 免責事項 本プログラムは、許可されたセキュリティテストおよび研究目的のみに使用してください。使用者はサイバーセキュリティ法に従って適切に使用してください。 使用者が本ツールを使用して何らかの不正攻撃などの違法行為を行った場合、その責任は作者には一切ありません。 使用方法 python3 CVE-2025-53558.py URL...
EnvVisualizer
EnvVisualizer . . . \ / \ \ / /|| | | || | / \ / /\ Y / | |/ / | \ \ | | | \ // \ \ | \ | \ / \ / | |\ | | // | || |/ /\ /| | / / /| // / |/ / /// \ | / / / / / / Analiza, categoriza y visualiza/proc/self/environ en máquinas Linux comprometidas. Convierte un muro de texto de variables...
cve-2021-3156-sudo-lab
🐧 CVE-2021-3156 — Sudo 安全实验室 基于 Python 开发的教育项目，重点分析 CVE-2021-3156 Baron Samedit 漏洞，这是 sudo 中的一个严重缺陷，可导致 Linux 系统的本地权限提升。 📌 项目目标 本项目旨在通过 Linux 环境练习基本的网络安全概念，包括： 真实 CVE 分析 识别存在漏洞的版本 评估权限提升风险 系统加固与修复 重点在于 技术学习 ，理解严重缺陷的影响，并以符合道德的方式培养红队和蓝队思维。 ⚙️ 功能特性 🔍 检测存在漏洞的 sudo 版本 🧠 分析系统权限上下文 📄 评估权限提升风险 🛡️ 提供修复与加固指南...
PT-2026-107562
Name of the Vulnerable Software and Affected Versions LMCache versions 0.5.5 and earlier Description An unauthenticated remote code execution issue exists where remote attackers can execute Python code by sending scripts to the '/run script' endpoint. By leveraging the injected FastAPI app object...
CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.4:CLSA-2026:1791413715)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791413715 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...
AlmaLinux 8 : python3.12 (ALSA-2026:77028)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77028 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of a...
RHEL 8 : python3.12 (RHSA-2026:77028)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77028 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
PT-2026-107583
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...
AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1791403199)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791403199 advisory. - The stringprep module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were use...