CVE-2024-23897

Jenkins ファイル読み取り脆弱性 - CVE-2024-23897 CVE-2024-23897 は、認証されていない攻撃者に Jenkins コントローラのファイルシステム上の任意のファイルを読み取り可能にする、Jenkins の重大な脆弱性です。この欠陥は、args4j ライブラリにおけるコマンド引数の不適切な処理に起因し、特にコマンドライン操作で @ 文字の後にファイルパスが続く場合に、許可されていないファイル内容の漏えいにつながる可能性があります。...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

React2Shell-Scanner

🔬 React2Shell Scanner Web Application Security Assessment Framework for React and Next.js Applications ⚠️ Important Notice This tool is designed for authorized security testing only. ✅ Authorized penetration testing ✅ Bug bounty programs within scope ✅ Security research with permission ✅ Testing...

multiscanner

MultiScanner Introduction MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built Python scripts, web APIs, software running on another machine, etc...

CVE-2019-5392-for-Python3

CVE 2019-5392用のPython3互換バージョン。python2.7をインストールする必要はありません。python3がインストールされたターミナルで実行してください。 使い方: cve.py python3 cve.py 2810 "C:\Windows\Temp"...

CVE-2021-44906

CVE-2021-44906 Originally from: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip Run npm run hack And you will see the any function's done property is changed to true. The explanation of command line node index.js --.concat.constructor.prototype.done true:...

CVE-2023-35078

CVE-2023-35078-Poc-Exploit This tool is built in golang language to exploit CVE-2023-35078 vulnerability To use this tool is quite easy, run command this on your terminal λ git clone https://github.com/LazyySec/CVE-2023-35078.git λ cd CVE-2023-35078 λ CVE-2023-35078 git:main go build...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387-Vulnerability-Checker LAB This Rust Code is designed to check SSH servers for the CVE-2024-6387 vulnerability Command-Line Arguments: ./main -f servers.txt -p 22,2222 -t 5...

CVE-2023-27163

CVE-2023-27163 Python implementation of CVE-2023-27163 Installation To install the project dependencies, follow these steps: 1. Clone the repository: git clone https://github.com/yourusername/yourrepository.git 2. Navigate into the project directory: cd yourrepository 3. Install the dependencies...

CVE-2017-12615-poc

-h View usage instructions...

jetty-line-check

jetty-line-check Which of these six 2026 CVEs has your Jetty or the Jetty pulled in by Spring Boot been hit by — and does the version the official guidance tells you to upgrade to actually exist on Maven Central? The headline is CVE-2026-2332 GHSA-355h-qmc2-wpwf, high / CVSS v3 7.4: chunked reque...

ralph

Ralph A working implementation of the Ralph Wiggum autonomous loop technique for Claude Code. Background The official ralph-wiggum plugin in Anthropic's plugin marketplace is currently broken due to a security update in Claude Code v1.0.20 August 2025. The security patch CVE-2025-54795 correctly...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2017-0213

CVE-2017-0213 for command line...

[SECURITY] Fedora 45 Update: mediaconch-25.04-4.fc45

MediaConch is an implementation checker, policy checker, reporter, and fixer that targets preservation-level audiovisual files specifically Matroska, Linear Pulse Code Modulation LPCM and FF Video Codec 1 FFV1. This project is maintained by MediaArea and funded by PREFORMA. This package includes...

VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

wtfis

wtfis Passive hostname, domain and IP lookup tool for non-robots WTF is it? wtfis is a commandline tool that gathers information about a domain, FQDN or IP address using various OSINT services. Unlike other tools of its kind, it's built specifically for human consumption, providing results that a...

pivit

Pivit Pivit is a command line tool for managing x509 certificates stored on smart cards with PIV applet support Yubikey, and using those certificates to sign and verify data. It is fully compatible with how the git command line calls external programs to sign and verify commits and tags. Install...

standalone_tdo

TDO スタンドアロン抽出ツール 大規模言語モデル（LLM）と高度な構造化出力機能を用いて、文書からサイバー脅威インテリジェンス（CTI）を抽出するための、強力なスタンドアロン型コマンドラインツールです。 🚀 特徴 マルチフォーマット文書対応 : PDF、DOCX、TXT、Markdown ファイル 高度なLLM統合 : 構造化出力と自動フォールバック解析を備えた Google Gemini モデル 包括的なCTIスキーマ : 豊富なプロパティを備えた12種類のエンティティタイプと24種類のリレーションシップタイプ 検知機会の生成 : エビデンスに裏付けられた実践的な脅威検知ルールを作成...