112 matches found
CVE-2024-24919
CVE-2024-24919 Nmap script to check vulnerability CVE-2024-24919 Vulnerability References: https://www.cvedetails.com/cve/CVE-2024-24919/ https://support.checkpoint.com/results/sk/sk182336 Dorks Hunter Hunter: /product.name="Check Point SSL Network Extender" Shodan SHODAN: http.title:"Check Point...
nmap_draytek_rce
nmapdraytekrce nmap script to detect CVE-2020-8515 on Draytek Devices...
CVE-2022-24706
CVE-2022-24706 Apache CouchDB 3.2.1 - Remote Code Execution RCE Checker Usage: nmap -p 4369 --script CVE-2022-24706.nse --script-args cookie=monster,timeout=5000...
nmap-CVE-2023-35078-Exploit
nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35078 - Mobile Iron Core Save the script into a file named nmap-CVE-2023-35078-Exploit.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script nmap-CVE-2023-35078-Exploit.nse...
Vulnerability-assessment
Installation & Usage Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Important: Use this script only against systems you have...
vuln-CVE-2022-41082
vuln-CVE-2022-41082 https & http FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...
nsdp-discover
nsdp-discover An Nmap script to identify Netgear Switch Discovery Protocol NSDP on UDP ports 63322 and 63324. The script tries to send a discovery request and creates a UDP server to listen for responses. Information recovered from this script includes: Device Type, Name, MAC, Location, IP,...
EUVD-2013-4730
Malware in sbrugna...
CVE-2011-10017
Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...
CVE-2011-10017 Snort Report nmap.php/nbtscan.php RCE
Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...
CVE-2011-10017
Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...
Snort Report Security Vulnerabilities
Snort Report is an inspection report management system from the Snort team. A security vulnerability exists in Snort Report versions prior to 1.3.2 that stems from the nmap.php and nbtscan.php scripts not being cleaned of user input, which could lead to remote command execution...
Linux Distros Unpatched Vulnerability : CVE-2013-4885
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload arbitrarily named files...
AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection
Cybersecurity researchers have disclosed a new variant of the AvosLocker ransomware that disables antivirus solutions to evade detection after breaching target networks by taking advantage of unpatched security flaws. "This is the first sample we observed from the U.S. with the capability to...
Exploit for Unsafe Reflection in Vmware Vcenter_Server
CVE-2021-21985 Checker. Simple Powershell imple...
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal Exploit
Exploit for multiple platform in category web applications Exploit Title: Citrix Application Delivery Controller ADC and Gateway 13.0 - Path Traversal CVE: CVE-2019-19781 Vulenrability: Path Traversal Vulnerablity Discovery: Mikhail Klyuchnikov Exploit Author: Dhiraj Mishra Vulnerable Version:...
Siemens LOGO! 8 Hard-Coded Cryptographic Key
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-012 Product: LOGO! Manufacturer: Siemens Affected Versions: LOGO! 8 all versions Tested Versions: LOGO! 8, 6ED1052-2MD00-0BA8 FS:03, 0BA8.Standard V1.08.03 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-321 Risk...
Vulners Nmap plugin
In previous post about Vulners vulnerability detection plugins for Burp and Google Chrome, I mentioned that it would be great to have a plugin for some free publicly available tool, like Nmap. And guys from the Vulners Team have recently released Nmap plugin. Isn't it awesome? To detect...
wildPwn - Brute forcer and shell deployer for WildFly (JBoss AS)
WildFly, formerly known as JBoss AS, or simply JBoss, is an application server authored by JBoss, now developed by Red Hat. WildFly is written in Java, and implements the Java Platform, Enterprise Edition Java EE specification. It runs on multiple platforms. WildFly is free and open-source...
