CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner E aí, esse é um script Python multi-thread foda do keklick1337 pra caçar domínios vulneráveis ao CVE-2025-30208 no Vite. Basicamente, ele verifica se você pode pegar arquivos aleatórios via o endpoint @fs com ?raw?? ou ?import&raw?? — tipo vazamento de /etc/passwd e...

cve-2016-20012

CVE-2016-20012 Script de Enumeração de Nomes de Usuário SSH Este script Python tenta enumerar nomes de usuário válidos em um servidor SSH, tentando conectar com uma senha inválida. Ele mede o tempo de resposta para cada nome de usuário para identificar possíveis contas válidas com base no...

Whisper_Bully

Whisper Bully Strumento di ricerca per Estrazione BDADDR Bluetooth, Denial-of-Service e Hijack © 2026 @Ymsniper — Solo per ricerca di sicurezza autorizzata. Panoramica Whisper Bully è uno strumento di ricerca sulla sicurezza Bluetooth in tre fasi che prende di mira i dispositivi che pubblicizzano...

CVE-2020-16270

CVE-2020-16270 Descrição sugerida : OLIMPOKS versões anteriores a 3.3.39 permite XSS em Auth/Admin ErrorMessage. Um atacante remoto pode usar a vulnerabilidade descoberta para injetar payload JavaScript malicioso nos navegadores das vítimas no contexto de aplicações vulneráveis. O código executad...

cve-2020-10977-read-and-execute

CVE-2020-10977 lesen und ausführen Über CVE-2020-10977 HackerOne-Bericht: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 Wie man den Ausführungsteil manuell reproduziert: Vom Lesen zur Ausführung Über dieses Repository getsecret.py - Hauptskript. Es...

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache CVE-2024-12008 уязвимость разглашения информации в W3 Total Cache...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 шаблоны nuclei Описание Minio — это фреймворк для многоклаудного объектного хранения. В кластерном развёртывании, начиная с RELEASE.2019-12-17T23-16-33Z и до RELEASE.2023-03-20T20-16-18Z, MinIO возвращает все переменные окружения, включая MINIOSECRETKEY и...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 Un problème dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permet à un attaquant distant d'obtenir des informations sensibles via le paramètre cookies CVE-2024-42658 : Résumé : Une vulnérabilité dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Beschreibung Dieses Skript automatisiert die Ausnutzung von CVE-2024-24919 Checkpoint Security Gateway – Unerlaubte Offenlegung von Informationen. 📌 Funktionen ✅ Testen einzelner und mehrerer URLs ✅ Automatisierte Ausnutzung ✅ Einfach & Schnell 🛠️ Verwendung Klonen Sie diese...

EUVD-2026-66815

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

EUVD-2026-66808

A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...

EUVD-2025-210804

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

EUVD-2026-66806

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

EUVD-2026-66803

The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project including database passwords, API keys, etc. by sending a TCP request without any credential...

EUVD-2026-66757

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

EUVD-2026-66775

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2024-24919-Bulk-Scanner

Scanner em Massa CVE-2024-24919 CVE-2024-24919 Divulgação de Informações do Check Point Security Gateway Script baseado em e créditos para: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ Este script Python verifica uma lista de URLs quanto à vulnerabilidade CVE-2024-2491...

hikihack

📚 Documentazione e illustrazioni Per completare questa analisi della vulnerabilità CVE-2017-7921 , sono disponibili diverse risorse. Esse hanno l'obiettivo di aiutare a comprendere le potenziali conseguenze di un dispositivo vulnerabile, l'importanza degli aggiornamenti di sicurezza e le buone...

Trinity-Audio-CVE-Report

Trinity-Audio-CVE-Report CVE-2025-9196 के लिए प्रकटीकरण CVE-2025-9196 - ट्रिनिटी ऑडियो में कमजोरी यह रिपॉजिटरी Trinity Audio = 5.20.1,WordPress प्लगइन sergiotrinity द्वारा विकसित में खोजी गई एक कमजोरी का प्रकटीकरण करता है। 🛠 प्रभावित संस्करण उत्पाद : Trinity Audio संस्करण : v5.20.1 URL :...

CVE-2025-67223

CVE-2025-67223: Aranda Service Desk में गलत पहुँच नियंत्रण और सूचना प्रकटीकरण CVE ID: CVE-2025-67223 प्रभावित उत्पाद: Aranda Service Desk Aranda File Server - AFS मॉड्यूल प्रभावित संस्करण: 8.3.12 लेखक: Brandon Perez Lara 🚨 अवलोकन Aranda Service Desk के फ़ाइल प्रबंधन मॉड्यूल Aranda File Server में...