Synology DSM - synoplugind RCE Exposure (CVE-2024-10441)

Identifies Synology DSM/BeeStation systems whose firmware is below SA-24:20 fixes for CVE-2024-10441 pre-auth synoplugind / SYNO.API.Auth plugin env injection. Uses SYNO.Core.System firmware when available. !/usr/bin/env python3 -- coding: utf-8 -- """Synology synoplugind pre-auth RCE exposure...

Synology Replication Service - Exposure Detection (CVE-2024-10442)

Detects Internet-exposed Synology Replication Service synobtrfsreplicad on TCP/5566. CVE-2024-10442 is a pre-auth memory corruption in libsynobtrfsreplicacore Pwn2Own Ireland 2024 / SA-24:22. !/usr/bin/env python3 -- coding: utf-8 -- """Synology Replication Service synobtrfsreplicad exposure...

Repetier-Server Directory Traversal File Read (CVE-2023-31059)

CVE-2023-31059 in Repetier-Server through 1.4.10: encoded ..\ traversal via /views.../base/connectionLost.php reads local files such as ProgramData/Repetier-Server/database/user.sql credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier-Server directory traversal arbitrary file read...

Ncast busiFacade Command Injection RCE (CVE-2024-0305)

Exploits CVE-2024-0305 in Ncast Yingshi recording system busiFacade.php: unauthenticated JSON param array reaches shell execution. !/usr/bin/env python3 -- coding: utf-8 -- """Ncast busiFacade unauthenticated command injection CVE-2024-0305.""" from future import annotations import json import re...

Fortinet FortiWeb - Authentication Bypass Detection (CVE-2025-64446)

CVE-2025-64446: relative path traversal on /api/v2.0/cmdb/system/admin allows unauthenticated attackers to reach cgi-bin/fwbcgi and invoke administrative APIs. !/usr/bin/env python3 -- coding: utf-8 -- """FortiWeb unauthenticated auth bypass via path traversal CVE-2025-64446.""" import base64...

Control Web Panel - Command Injection Detection (CVE-2025-48703)

CVE-2025-48703: unauthenticated POST to //index.php?module=filemanager&acc=changePerm with shell metacharacters in ttotal chmod argument allows OS command execution when a valid non-root username is known. !/usr/bin/env python3 -- coding: utf-8 -- """CWP unauthenticated command injection in...

Gladinet CentreStack/Triofox LFI (CVE-2025-11371)

Unauthenticated local file inclusion via GET /storage/t.dn?s= UploadDownloadProxy TempDownload. Commonly used to read Web.config and extract ASP.NET machine keys chain to CVE-2025-30406 ViewState RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Gladinet CentreStack/Triofox unauthenticated LFI...

Drupal 7 elFinder Connector Upload RCE

Uploads a PHP webshell through the exposed elFinder connector.php Drupal 7 sites/all/libraries/elfinder and runs commands via GET. Companion to public PoCs Kro0oz/drupal-7-elfinder. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal 7 elFinder connector.php unauthenticated PHP upload RCE.""" fro...

Control Web Panel changePerm Command Injection RCE (CVE-2025-48703)

Exploits CVE-2025-48703 in CentOS Web Panel / Control Web Panel before 0.9.8.1205: unauthenticated POST to //index.php?module=filemanager&acc=changePerm injects shell metacharacters via the ttotal chmod parameter. Opens a command-execution session. !/usr/bin/env python3 -- coding: utf-8 --...

WAGO WBM Command Injection RCE (CVE-2023-1698)

Exploits CVE-2023-1698 in the WAGO web-based management legal-information plugin: unsanitized JSON package field passed to shellexec on /wbm/plugins/wbm-legal-information/platform/pfcXXX/licenses.php. !/usr/bin/env python3 -- coding: utf-8 -- """WAGO WBM licenses.php unauthenticated command...

QNAP QTS - CVE-2022-27596 Exposure Detection

Detects QNAP NAS running vulnerable QTS 5.0.1 or QuTS hero h5.0.1 firmware before patched builds for CVE-2022-27596 unauthenticated SQL injection. Version is parsed from authLogin.cgi when exposed. !/usr/bin/env python3 -- coding: utf-8 -- """QNAP QTS 5.0.1 / QuTS hero h5.0.1 SQLi exposure...

Output Messenger Unauthenticated Zip-Slip Surface Detection

Checks for open TCP 14121 XMPP and 14135 SOCKS5 file listener used by Output Messenger Server 2.0.x pre-auth zip-slip RCE CVE-2026-75289. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Output Messenger Server XMPP / file-listener exposure CVE-2026-75289.""" import socket from kittysploit...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

salt-scanner

salt-scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Features Slack notification and report upload JIRA integration OpsGenie integration Requirements Salt Open 2016.11.x salt-master, salt-minion¹ Python 2.7 salt you ma...

Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch

A single container image that brings Vulnerability Management and Policy Audit to every Kubernetes node, on immutable and mutable Linux alike, deployed the way your container workloads already are. Key Takeaways The Qualys Cloud Agent is now available as a container image on Docker Hub , bringing...

SMBGhost

SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...

Exploit for CVE-2026-86596

CVE-2026-86596 - s2Member reassembles → bypasses stripphp...

Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It

Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind whose traffic passes through a gateway the enterprise owns. Most agents never touch one. One recent case shows what that gap looks like ...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple Critical severity CVEs.

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple Critical severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-11525 DESCRIPTIO...

exitmap

This repository is unmaintained. Refer toThe Tor Project's fork. Overview Exitmap is a fast and modular Python-based scanner for Tor exit relays. Exitmap modules implement tasks that are run over a subset of all exit relays. If you have a background in functional programming, think of exitmap as ...