577 matches found
CVE-2021-21975
CVE-2021-21975 CVE-2021-21975 भेद्यता की जाँच करने के लिए Nmap स्क्रिप्ट भेद्यता संदर्भ: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html ब्लॉग...
CVE-2021-26855
CVE-2021-26855 CVE-2021-26855，也称为Proxylogon，是Exchange中的一个服务器端请求伪造SSRF漏洞，允许攻击者发送任意HTTP请求并以Exchange服务器身份进行身份验证。根据发现该漏洞的研究人员Orange Tsai的说法，CVE-2021-26855在结合CVE-2021-27065（见下文）利用时，可实现代码执行。一个成功的利用链将允许未经身份验证的攻击者“仅通过开放的443端口在Microsoft Exchange Server上执行任意命令”。更多信息和披露时间线请访问 https://proxylogon.com。...
CVE-2020-5902-F5BIG
CVE-2020-5902-F5BIG 只需像这样运行命令 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...
CVE-2024-21762
Utilizzo: python3 exploit.py --target 192.168.1.1:443 --callback-ip YOURIP --callback-port 8080...
scanner-CVE-2020-5902
BIP-IP TMUI Scanner - CVE-2020-5902 Das Skript führt Prüfungen für CVE-2020-5902 durch Verwendung: Stellen Sie eine Liste von IP-Adressen in "ip.txt" bereit, um nach CVE-2020-5902 zu scannen Standardport: 443 Beispielausgabe + Host ist anfällig für CVE-2020-5902:IP Address + Host ist nicht anfäll...
cve-2021-22005-exp
cve-2021-22005-exp 0x01 Introduzione alla vulnerabilità Il 21 settembre 2021, VMware ha pubblicato un advisory di sicurezza in cui sono state divulgate 19 vulnerabilità in vCenter Server, con punteggi CVSSv3 compresi tra 4.3 e 9.8. Tra queste, la vulnerabilità più grave è quella di caricamento...
Commvault-CVE-2025-34028
CVE-2025-34028 Execução Remota de Código no Commvault CVE-2025-34028 NSE Como executar no Nmap: nmap -p443 --script CVE-2025-34028 --script-args='https-ports=443'...
CVE-2025-0108
Salva questo script come paloaltocve20250108.nse, quindi esegui il seguente comando Nmap: nmap --script paloaltocve20250108.nse -p 80,443 oppure per una lista di target: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...
mediator
Mediator è una reverse shell crittografata end-to-end in cui l'operatore e la shell si connettono a un server "mediatore" che funge da ponte tra le connessioni. Ciò elimina la necessità per l'operatore/handler di configurare il port forwarding per ascoltare la connessione. Mediator permette anche...
CVE-2021-34473-NMAP-SCANNER
CVE-2021-34473-NMAP-SCANNER Ein massiver Scanner für die Microsoft Exchange Windows-Schwachstelle CVE-2021-34473 Befehle root@kitploit: nmap -iR 500000 -n -p 443 --script cve202134473.nse scan500k.txt nmap website.com -n -p 443 --script cve202134473.nse Beispiel root@kitploit: Starting Nmap 7.92...
Salat-Stealer-Telegram-Proxy-Decoy-C2-Analysis
1. Esca Telegram Proxy – Camuffamento ed Evasione Quando viene eseguito, Salat Stealer mostra un'interfaccia Telegram Proxy perfettamente funzionante. Questa esca funge da camuffamento per indurre l'utente a credere di stare eseguendo una legittima applicazione proxy, mentre il malware esegue le...
westone-CVE-2021-21972-scanner
westone-CVE-2021-21972-scanner Vulnerabilidade de execução remota de código no VMware vCenter Server. Um invasor malicioso com acesso à porta 443 pode enviar uma requisição cuidadosamente construída ao vCenter Server, o que eventualmente causará execução remota arbitrária de código. Instalação e...
SUSE CVE-2026-54764
Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured with trustForwardHeader: false, derives the X-Forwarded-Port header sent to the authentication service from the original incoming request instead of t...
Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The issue results from improper...
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
Summary A vulnerability exists in the Community Tier of Harden-Runner that allows bypassing the egress-policy: block network restriction using DNS queries over TCP. Harden-Runner enforces egress policies on GitHub runners by filtering outbound connections at the network layer. When egress-policy:...
CVE-2021-22005
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...
Siemens SIPROTEC Inadequate Encryption Strength (CVE-2024-38867)
The affected devices are supporting weak ciphers on several ports 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS. This could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports. This plugin only...
EUVD-2016-4972
Malware in sbrugna...