Check-AAD-Connect-for-CVE-2021-36949-vulnerability

Скрипт проверит, работает ли ваш Azure AD Connect с версией, затронутой уязвимостью, описанной в CVE-2021-36949. Затронутыми версиями являются 1.6.4.0 и 2.0.3.0. Запустите скрипт на сервере, на котором размещена установка AAD Connect. Скрипт также проверяет, включена ли функция автоматического...

PoC-2023-43208

CVE-2023-43208-EXPLOIT Mirth Connect Удаленное выполнение кода RCE Эксплойт ⚠️ ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ И ЛАБОРАТОРНЫХ ЦЕЛЕЙ ⚠️ Доказательство концепции эксплойта для CVE-2023-43208, уязвимости удаленного выполнения кода в Mirth Connect до версии 4.4.1. 🚨 ВАЖНОЕ ЮРИДИЧЕСКОЕ ПРЕДУПРЕЖДЕНИЕ Этот...

CVE-2023-46805

CVE-2023-46805 Сканер Сканер CVE-2023-46805 для возможно уязвимых устройств Ivanti Connect Secure по странам с использованием Shodan. Версия скрипта: 1.3 Обновлено с учётом недавнего поста в блоге Assetnote ⚠️ Этот скрипт предназначен для защитных целей и должен использоваться специалистами по...

CVE-2026-94276

Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that serves multiple issuers, a token that introspects as active for one issuer may get accepted on a route restricted to another. This issue...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Обзор Возможности Типы проверок WEB ACCESS SYSTEM INFO BYPASS DETECTED Пояснение типов статусов Начало работы Требования Использование Аргументы Указание целей Пользовательские переменные Оформление вывода Пла...

pulse-meter

Pulse Meter 이것은 Ivanti Connect Secure 어플라이언스의 시스템 스냅샷을 파싱하여 CVE-2023-46805, CVE-2024-21887 및 CVE-2025-0282와 관련된 잠재적 IOC를 식별하기 위한 진행 중인 작업입니다. 주의 : 가양성이 발생할 수 있으므로 결과를 수동으로 확인하는 것이 가장 좋습니다. 스냅샷 복호화에 관한 참고 사항 스냅샷은 하드코딩된 키로 암호화되어 있습니다. 안타깝게도 여기서 키를 공개할 수 없으므로 직접 찾아야 합니다. 키를 24바이트 16진수 문자열로 포맷한 후 --k...

ivanti_shell

Эксплуатация CVE-2024-21887 с помощью Ngrok обратного шелла Этот репозиторий содержит Python-скрипт, предназначенный для демонстрации эксплуатации уязвимости CVE-2024-21887 в шлюзах Ivanti Connect Secure. Он использует Ngrok для установления обратного шелла в образовательных и этических целях...

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 Arbitrary-file-read 🤵🏻 Затронутые версии: Jenkins 2.441 и более ранние. Jenkins LTS 2.426.2 и более ранние. Скрипт на Python для автоматизации уязвимости CVE-2024-23897 🤖 🛠️ Этот код на Python представляет собой сканер для конкретной уязвимости CVE-2024-23897 на серверах Jenkins...

CVE-2026-94276

Apache APISIX versions 3.12.0 through 3.18.0 are vulnerable to an Improper Authentication issue in the openid-connect plugin . When using remote introspection against an authorization server supporting multiple issuers, a token valid for one issuer may be incorrectly accepted on a route restricte...

CVE-2026-94276 Apache APISIX: Openid-connect introspection validation issue

Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that serves multiple issuers, a token that introspects as active for one issuer may get accepted on a route restricted to another. This issue...

CVE-2026-94276 Apache APISIX: Openid-connect introspection validation issue

Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that serves multiple issuers, a token that introspects as active for one issuer may get accepted on a route restricted to another. This issue...

EUVD-2026-90769

Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that serves multiple issuers, a token that introspects as active for one issuer may get accepted on a route restricted to another. This issue...

CVE-2026-103758 Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tool...

EUVD-2026-90687

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tool...

CVE-2026-103758 Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tool...

CVE-2025-11988

1 Извлекаем публичный nonce cryptoajax UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' PAGEURL='http://localhost/wordpress//' NONCE=$curl -s "$PAGEURL" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s' Fallback...

-Educational-PoC-CVE-2026-23520

CVE-2026-23520: Протокол контекста модели MCP Подключение RCE - Образовательный PoC - Arcane ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Данный репозиторий и содержащиеся в нём скрипты предназначены строго для образовательных и академических целей. Предоставленная информация предназначена для помощи специалистам п...

CentOS Linux 6 [TuxCare] Security Update: curl / libcurl / libcurl-devel (CENTOS6:CLSA-2026:1774276586)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1774276586 advisory. - curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for th...

undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security TLS certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...