HostHunter

HostHunter v2.0 A tool to efficiently discover and extract hostnames providing a large set of target IPv4 or IPv6 addresses. HostHunter utilises simple OSINT and active reconaissance techniques to map IP targets with virtual hostnames. This is especially useful for discovering the true attack...

ip-finder-cli

IPFinder CLI（コマンドラインインターフェース） https://ipfinder.io/ 単一IPアドレス、ASN、レンジ、ファイアウォールを入力としてサポート 一括処理をサポート 結果を画面または出力ファイルにエクスポート IPv4およびIPv6をサポート ASN番号、レンジ、ファイアウォールをサポート はじめに 無料のIPFinder APIアクセストークンを取得するために、https://ipfinder.io/auth/signupで無料アカウントにサインアップしてください。...

Egresser

Egresser 著者: [email protected] 著作権: Cyberis Limited 2013 ライセンス: GPLv3 LICENSE を参照 アウトバウンド（外向き）ファイアウォールルールをテストするために設計されたクライアント/サーバースクリプト。 説明 Egresser は、アウトバウンドファイアウォールルールを列挙するツールであり、ペネトレーションテスターが企業ネットワーク内から外向き（egress）フィルタリングが適切かどうかを評価するために設計されています。各 TCP ポートを順に調べると、Egresser サーバーはクライアントの送信元 IP...

cdpsnarf

CDPSnarf v0.1.6 Cisco Discovery Protocol スニファ 作者: Tasos "Zapotek" Laskos [email protected] [email protected] GNU General Public License v2 の下でライセンスされています General CDPSnarf は、CDP パケットから情報を抽出するためにのみ書かれた ネットワークスニファです。 これは、"show cdp neighbors detail" コマンドが Cisco ルータ上で...

cve-2017-8890-msf

Module: Phoenix Talon CVE 2017-8890 This may resolve issue 8571, which requests Phoenix Talon modules. Overview of 2017-8890 This CVE: is the most serious member of the Phoenix Talon class of Linux kernel vulnerabilities. No POC of this CVE exists in the Exploit DB. But other public POC's are...

PoC-Exploit-CVE-2024-20467

Cisco IOS XE の脆弱性 CVE-2024-20467 のエクスプロイト 概要 このエクスプロイトは、Cisco IOS XE Software で見つかった IPv4 フラグメント再構築コードの脆弱性を標的としています。この脆弱性により、認証されていないリモートの攻撃者が脆弱なデバイスでサービス拒否 DoS 状態を引き起こす可能性があります。 影響を受けるデバイス ルーター: Cisco ASR 1000 Series モデル: Cisco cBR-8 ソフトウェアバージョン: Cisco IOS XE Software Release 17.12.1 および 17.12.1...

CVE-2026-104458 YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl that allows unauthenticated attackers to bypass the SSRF guard using 6to4, NAT64, or IPv4-compatible IPv6 addresses. Attackers can send a crafted Signature keyId to the public actor inbox route to reach...

SUSE SLES16 Security Update : kernel (Live Patch 4 for SUSE Linux Enterprise 16) (SUSE-SU-2026:23942-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23942-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues we...

SUSE SLES16 Security Update : kernel (Live Patch 3 for SUSE Linux Enterprise 16) (SUSE-SU-2026:23941-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23941-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues we...

SUSE SLES16 Security Update : kernel (Live Patch 9 for SUSE Linux Enterprise 16) (SUSE-SU-2026:23937-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23937-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues...

CVE-2026-33534

CVE-2026-33534 - EspoCRM 9.3.3 认证后 SSRF 针对 EspoCRM 9.3.3 中 /api/v1/Attachment/fromImageUrl 端点通过替代 IPv4 环回表示法实现认证后 SSRF 的概念验证。 摘要 EspoCRM 9.3.3 会阻止诸如 http://127.0.0.1/... 之类的直接环回 URL，但服务端获取路径接受 cURL 会将其规范化为环回的替代 IPv4 表示形式。这使得有权访问受影响附件/图片上传流程的认证用户能够使 EspoCRM 服务器获取内部资源。 该漏洞利用首先提交一个直接的 127.0.0.1...

Linux Distros Unpatched Vulnerability : CVE-2026-102577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user...

Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_9190)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249190 advisory. python: The zipfile module is vulnerable to zip-bombs leading to denial of service CVE-2024-0450 python: incorrect IPv4 and IPv6 private ranges CVE-2024-40...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2024_5291)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245291 advisory. golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24789 golan...

CVE-2026-50131

CVE-2026-50131 Fedify における不完全なSSRF緩和策（GHSA-p9cg-vqcc-grcx 後）：validatePublicUrl が特殊用途IPv4範囲を許可していた。 主要アドバイザリ: GHSA-xw9q-2mv6-9fr8 公式CVEレコード: CVE-2026-50131 研究者クレジット: @chaitanyagarware 概要 フィールド| 値 ---|--- CVE| CVE-2026-50131 GHSA| GHSA-xw9q-2mv6-9fr8 プロジェクト| fedify-dev/fedify パッケージ| @fedify/fedify,...

CVE-2026-102577

A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted...

EUVD-2026-89716

A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted...

CVE-2026-102577

A flaw in Moodle 's URL downloader allows an authenticated remote user to bypass host-blocking restrictions. The root cause is the incorrect handling of IPv4-mapped IPv6 addresses , which enables an attacker to provide a crafted URL that forces the server to make requests to restricted destinatio...

CVE-2026-102577 Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass

A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted...

CVE-2026-102577 Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass

A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted...