114 matches found
masscan
MASSCAN: マスIPポートスキャナ これはインターネット規模のポートスキャナです。1台のマシンから1秒間に1000万パケットを送信し、5分未満でインターネット全体をスキャンできます。 使い方（パラメータ、出力）は、最も有名なポートスキャナである nmap と似ています。迷ったら、それらの機能のいずれかを試してみてください。多くのマシンの広範囲スキャンをサポートする機能は対応していますが、単一マシンの詳細スキャンは対応していません。 内部的には、scanrand、unicornscan、ZMap...
CVE-2019-0708-POC
CVE-2019-0708-POC 食用说明 IP格式：IP:端口，保存到ip.txt cve-2019-0708.py 100线程...
CVE-2018-9995-2
ツール CVE-2018-9995-2 CVE: CVE-2018-9995 エクスプロイト作者: Fernandez Ezequiel @capitanalfa 修正者: Kien Quoc バージョン: 2.0 Python3 のインストール apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 クイックスタート git clone https://github.com/kienquoc102/CVE-2018-9995-2 cd...
CVE-2021-41773-exploit
用法 文件 ip-ports.txt： 1.1.1.1:80 node CVE-2021-41773.js ip-ports.txt...
CVE-2026-24061
CVE-2026-24061 python3 exploit.py...
CVE-2026-27472-and-CVE-2026-27474
CVE-2026-27472 和 CVE-2026-27474（CVSS-B 5.3 中危 和 CVSS-B 4.8 中危） SPIP 4.4.8 联合功能中的盲 SSRF 及存储型 XSS 更多解释请访问我的网站 PoC 1. 以管理员身份登录。 2. 确保在 站点内容 配置中，站点引用与联合 设置为 管理网站目录。 3. 导航至某个栏目，然后点击 引用一个站点。 4. 在 联合 字段中，点击 联合 并输入目标 IP 和端口：tcp://127.0.0.1:22。 5. 保存。 6. 将响应时间与开放端口（tcp://127.0.0.1:80）进行对比。您也可以在被联合站点的页面上点击...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: Added an seqadj extension for natted connections. Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. This is due to the need to rewrite the packet payload IP, port on the ftp control...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-67874
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is susceptible to an incorrect access control vulnerability in the getIpPortFilterRules function. This flaw allows unauthenticated attackers to obtain sensitive IP and port filtering rules by sending a crafted POST request t...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...
CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...
TencentOS Server 4: nginx (TSSA-2025:0724)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0724 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
The vulnerability of the portValidate method in the IpOrPortController class of the IT infrastructure and cybersecurity management system Sangfor Operation and Maintenance Security Management System (OSM) allows a attacker to execute arbitrary commands.
The vulnerability of the portValidate method in the IpOrPortController class of the IT infrastructure and cybersecurity management system, Sangfor Operation and Maintenance Security Management System OSM, is related to the failure to take measures to neutralize special elements during the...
BIT-NGINX-GATEWAY-2025-23419 TLS Session Resumption Vulnerability
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...