CVE-nu11secur1ty

CVE-nu11secur1ty 分析説明のリンク表: CVE-2020| CVSS ベクター| スコア ---|---|--- CVE-2020-0668| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| 7.8 高 CVE-2020-0683| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| 7.8 高 CVE-2020-0796| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H| 10.0 重大 CVE-2020-2555|...

1day-archive

1dayexploit - 归档 近期披露 CVE 的技术深度剖析与根因分析。 关于 本仓库收录近期披露 CVE 的技术分析文章——即补丁发布与大规模利用之间的 1-day 窗口期。 每篇分析包含： 受影响的产品、厂商及版本范围 补丁差异与根因分析 演示漏洞的 PoC 面向防御者的检测指引 原始披露的参考链接 分析 CVE| 厂商| 产品| 类别| 严重程度| 分析文章 ---|---|---|---|---|--- CVE-2018-1160| Netatalk Project| Netatalk 3.1.x before 3.1.12 and 2.x before 2.2.7|...

patch-diffing-in-the-dark

黑暗中的补丁比对 一个利用CVE分析与补丁比对来发现新漏洞的系列博客文章。 正如博客文章所示，4个CVE均源自对CVE-2021-1657的深入研究。 目录 CVE-2021-1657的成果： 第1部分 - 黑暗中的补丁比对 第2部分 - 坠入兔子洞 第3部分 - 倒下但未出局 第4部分 - 你信任我吗？ CVE-2020-1030的成果（额外研究）： 补丁比对：又一个Spooler漏洞 发现又一个Spooler漏洞 CVE映射 CVE| 描述| 类型| 博客参考 ---|---|---|--- CVE-2022-26916| Windows传真撰写表单远程代码执行|...

asterion-network-minotaur

倫理的なネットワークセキュリティ監査ツール — SMB、RDP、LDAP、SSH、Kerberosなど50以上のチェックを備え、AI駆動のCVE分析とOWASP/CIS/NISTコンプライアンスマッピングに対応。 クイックスタート · ドキュメント · Docker · AI機能 · GitHubでスター 動作中のスクリーンショット ローカルスキャン · 127.0.0.1 · 33件の検出 0C/4H/2M/3L/24I · 16チェック · 57.74秒 · .NET 8.0.22 !Asterion —...

nuclei-cve-analyzer

Nuclei CVE Analyzer A fast CLI tool for analyzing CVE coverage in Nuclei templates. Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps. Built for...

Vulnerability-and-Exploit-Analysis

🛡️ Vulnerability and Exploit Analysis Ethical Hacking labor...

Vulnerability-Scanner-using-Ollama-3-

Vulnerability Scanning & Exploitation Toolkit A Python-based...

30-week-binary-exploitation-cve-program-generated-by-AI

\ 30-Week Binary Exploitation & CVE Analysis Program for Embed...

EUVD-2007-0383

Malware in sbrugna...

Exploit for Out-of-bounds Write in F5 Nginx

Disclosures Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts URL: https://github.com/badd1e/Disclosures List CVE-2009-2629: nginx http module Buffer Underflow Remote Code Execution Vulnerability Patch analysis, testcase, notes CVE-2013-0007: Microsoft XML Core...

CVE-2025-31492

A flaw was found in modauthopenidc, an OpenID Connect authentication module for Apache HTTP Server. This vulnerability allows unauthenticated users to access protected content via crafted HTTP POST requests to protected resources when no application-level gateway is present. Mitigation Mitigation...

CVE-2025-21945

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2lock If smblock-zerolen has value, -llist of smblock is not delete and flock is old one. It will cause use-after-free on error handling routine...

On November 13, NIST NVD finally admitted the obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year (September 30)

On November 13, NIST NVD finallyadmittedthe obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year September 30. This is actually visible in their own statistics. At the moment, there are 19860 identifiers in the backlog. This week, 1136 new CVEs were...

Vulristics Command Line Interface, improved Product & Vuln. Type Detections and Microsoft Patch Tuesday November 2021

Hello everyone! In this episode I want to highlight the latest changes in my Vulristics project. For those who dont know, this is a utility for prioritizing CVE vulnerabilities based on data from various sources.. Currently Microsoft, NVD, Vulners, AttackerKB. Command Line Interface I started...

Introducing the 2020 Vulnerability Intelligence Report: 50 CVEs that Made Headlines in 2020

2020 was a tumultuous year for vulnerability risk management. Defenders had to contend with a growing volume of high-priority security threats, many of them in internet-facing technologies deployed to enable and secure a suddenly remote workforce. New communications from the U.S. National Securit...

Vulristics: Beyond Microsoft Patch Tuesdays, Analyzing Arbitrary CVEs

Hello everyone! In this episode I would like to share an update for my Vulristics project. For those who dont know, in this project I am working on an alternative vulnerability scoring based on publicly available data to highlight vulnerabilities that need to be fixed as soon as possible. Roughly...

CVE-2013-4558

CVE-2013-4558 affects Subversion’s mod_dav_svn in Apache HTTPD when built with assertions and SVNAutoversioning enabled, allowing remote DoS via a non-canonical URL (trailing /). Affected versions: Subversion 1.7.11–1.7.13 and 1.8.1–1.8.4. Root cause: assertion triggered by non-canonical requests...

Sql injection

Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these issues...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...

CVE-2006-3850

Vanilla CMS 1.0.1 and earlier contains a remote file inclusion vulnerability in upgrader.php when /conf/old_settings.php exists. An attacker can dereference a URL in the RootDirectory parameter to execute arbitrary PHP code. The issue has been disputed for version 1.0 (some sources state the Root...