Vulnerability-assessment

Installation & Usage Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Important: Use this script only against systems you have...

writeup-CVE-2024-3094

writeup-CVE-2024-3094...

CVE-2025-55752

CVE-2025-55752 Demo...

CVE-2018-2628all

CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: 192.168.31.1:443 192.168.31.100:443 Save it as url.txt in the same directory and run the script. Please comment on the output effect yourself! Execute like this: The program works fine under Deepin, but not under Ubuntu on Win10,...

CVE-2025-67146-CVE-2025-67147

CVE-2025-67146-CVE-2025-67147...

CVE-2017-11882-

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

cve-2024-31497

This repository does not have a README...

CVE-2019-18935-checker

CVE-2019-18935-checker...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...

apache-flink-directory-traversal.nse

This repository does not have a README...

fixcve2023_39526_2023_39527

fix CVE 202339526 GHSA-gf46-prm4-56pc https://github.com/advisories/GHSA-gf46-prm4-56pc CVE 202339527 GHSA-xw2r-f8xv-c8xp https://github.com/advisories/GHSA-xw2r-f8xv-c8xp Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527...

F5-BIG-IP-CVE-2020-5902-shodan-scanner

F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-IP CVE-2020-5902 checker using Shodan CLI Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I...

-CVE-2017-10271-

-CVE-2017-10271- CVE-2017-10271Java Deserialization Vulnerability Java Deserialization Vulnerability Exploitation Tool V1.0 A tool for checking vulnerabilities related to Java deserialization, developed using JDK 1.8. The software requires JDK 1.8 or above to be installed...

MicroserviceCVE-2021-39156

This repository does not have a README...

CVE-2020-35391

CVE-2020-35391 Tenda f3 Malformed HTTP Request Header Processing Vulnerability. Run python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan Dork Exploitation...

CVE-2026-24118

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

CVE-2022-29622

CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...

scanner-CVE-2020-5902

BIP-IP TMUI Scanner - CVE-2020-5902 Script will run checks for CVE-2020-5902 Usage: Provide list of IP address in "ip.txt" to scan for CVE-2020-5902 Default port: 443 Sample Output + Host is vulnerable to CVE-2020-5902:IP Address + Host is not vulnerable to CVE-2020-5902:IP Address...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Developed by m10sec. This script automatically detects the Nginx version on a remote server and evaluates whether it is vulnerable to known security flaws, specifically: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Memory corruption in ngxhttpmp4module...

security-research

Security Research Vulnerability research write-ups. Every entry here corresponds to a fixed, publicly tracked issue — no theoretical findings. Adel Bouachraoui — hydrasecurity.fr/v10/ · LinkedIn · YesWeHack Published Write-up| Target| Class| ID ---|---|---|--- When a security patch guards the wro...