TomcatScanPro

TomcatScanPro README Version: 简体中文 Introduction This project is a weak password detection tool for Tomcat services. It supports multiple exploitation methods for CVE-2017-12615 vulnerability and integrates CNVD-2020-10487 Tomcat AJP protocol local file inclusion vulnerability exploitation...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Python2 Multithreaded Scanning for Tomcat-Ajp Protocol File Read Vulnerability A tool for scanning SRC rewards The PoC originates from https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, I am not the author of the PoC!!!! Operation 1. Place the domain/IP to be scanned in ip.txt Do not...

CNVD-2020-10487-Bulk-verification

CNVD-2020-10487 CVE-2020-1938 Batch Verification Script Batch script, based on the POC file by @YDHCUI, supports batching and automatic screenshots for easy review. 1. Environment Preparation Use conda to install virtual environments search Baidu for miniconda installation. Since the POC uses...

ECShop 4.1.0 - SQL Injection

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. id: CVE-2021-41460 info: name: ECShop 4.1.0 - SQL Injection author: SleepingBag945 severity: high description: | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited ...

WebLogic_CNVD_C_2019_48814

WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

WebLogic_CNVD_C2019_48814

7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

CVE-2024-39199

CVE-2024-39199 / CNVD-2024-31551 write url in url.txt and run 100000CMS-POC.py to check...

Serein

Serein | 身处落雨的黄昏 | 该项目暂停更新 Linux English version is online! | Linux英文版版本上线！ http://github.com/W01fh4cker/SereinLinux Declaration | 声明 该项目仅供授权下使用，禁止使用该项目进行违法操作，否则自行承担后果，请各位遵守《中华人民共和国网络安全法》！！！ 由于是短时间熬夜所写，头脑昏昏，料想会有不少错误，欢迎指出，我的联系方式在下方已经贴出，不胜感激！ 计划七月份每天增加一个漏洞利用模块，所以欢迎star/fork，您的每一个star和fork都是我前进的动力！...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38408)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delSmartQosCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37984)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability arises from the failure of the /pages/prosearchfrm.php file to properly validate the...

Ivanti Neurons for ITSM has a missing authorization vulnerability

Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a missing authorization vulnerability; this vulnerability arises from incorrect user authorization verification. Attackers can exploit this vulnerability to execute...

LiteLLM SQL injection vulnerability

LiteLLM is an open-source application developed by Berri AI. It allows for the invocation of all LLM APIs in the OpenAI format. LiteLLM has a SQL injection vulnerability, and attackers can exploit this vulnerability to obtain sensitive database information...

N-able N-central authorization issue vulnerability

N-able N-central is a remote monitoring and management system developed by the Canadian company N-able. Versions of N-able N-central prior to 2026.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to bypass authentication processes...

IBM Langflow OSS Code Execution Vulnerability (CNVD-2026-32373)

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a code execution vulnerability. This vulnerability stems from improper handling of HTTP requests, allowing attackers to execute arbitrary code on the server by exploiting this...

IBM App Connect Enterprise information leakage vulnerability (CNVD-2026-31544)

IBM App Connect Enterprise is an enterprise-level application connection platform used for system integration. It supports connections and conversions between applications, data, and APIs. There is an information leakage vulnerability in IBM App Connect Enterprise. This vulnerability stems from t...

IBM Langflow OSS code injection vulnerability

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...

IBM Langflow OSS path traversal vulnerability

IBM Langflow OSS is an open-source low-code visual AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to integrate wit...

IBM Langflow OSS authorization issue vulnerability (CNVD-2026-31200)

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...

Adobe Campaign Classic SQL Injection Vulnerability

Adobe Campaign Classic is a marketing activity management platform developed by the American company Adobe. Adobe Campaign Classic has a SQL injection vulnerability, which stems from improper handling of special elements in SQL commands. Attackers can exploit this vulnerability to gain access to...

IBM App Connect Enterprise path traversal vulnerability (CNVD-2026-31543)

IBM App Connect Enterprise is an enterprise-level integration platform, primarily used for connecting different applications, data, and APIs to build integrated processes. IBM App Connect Enterprise has a path traversal vulnerability. This vulnerability stems from the failure to properly validate...