NotCVE-2026-0010

Summary Vulnerability: Unauthenticated IPC Local Privilege Escalation to SYSTEM via Barrier Daemon TCP Port 24801 Vendor: debauchee Barrier project Product: Barrier 2.4.0 final release, 2021-11-01 CWE: CWE-306: Missing Authentication for Critical Function Description Barrier's Windows service...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Fix A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010. Vulnerability CVE: CVE-2023-31902 Affected version: Mobile Mouse 3.6.0.4 Default port: TCP/9099 What Was Fixed The original exploit successfully downloads the paylo...

CVE-2026-39047

CVE-2026-39047: Epson Printer RAW Protocol Exploit Framework Repository: https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 PoC Script: poc.py Mock Target: mockprinter.py Author: J4ck3LSyN Overview This framework demonstrates the CVE-2026-39047 vulnerability - a remote buffer overflow in Epson...

CVE-2020-0609

CVE-2020-609-POC Running the PoC against a RDG server with UDP open on port 3391, will cause the RDG instance to crash. Thanks to @Ollypwn for sparring during development...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

CVE-2021-1675-SCANNER

CVE-2021-1675-SCANNER Vulnerability Scanner for CVE-2021-1675 follow install instructions for https://github.com/cube0x0/CVE-2021-1675 make sure you have rpcdump.py from a list of hosts that you gather use nmap tag -oG to output your file with list of hosts that are up Example: nmap -iL hosts.txt...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 描述 CVE-2024-6387Check 是一款轻量、高效的工具，旨在识别运行存在漏洞的 OpenSSH 版本的服务器，专门针对最近发现的 regreSSHion 漏洞（CVE-2024-6387）。该脚本有助于快速扫描多个 IP 地址、域名和 CIDR 网络范围，以检测潜在漏洞并确保基础设施安全。 🌟 功能特性 快速扫描 ：快速扫描多个 IP 地址、域名和 CIDR 范围，检测 CVE-2024-6387 漏洞。 横幅获取 ：无需认证即可高效获取 SSH 横幅。 多线程 ：使用线程进行并发检查，显著缩短扫描时间。 详细输出...

CVE-2026-98128

A flaw was found in the Linux kernel's mpi3mr driver. This vulnerability can lead to a Denial of Service DoS due to kernel memory exhaustion. When an error occurs during Serial Attached SCSI SAS port addition, the driver fails to properly release an acquired reference count on the target device...

CVE-2021-36630

CVE-2021-36630 The SmartZone series devices of Ruckus have security risks. After notifying the manufacturer, they actively organized technical personnel to conduct investigations. During this period, we also provided security suggestions and verification methods many times. On July 19, the compan...

sshfinder

sshfinder 发现网络上的每一个 SSH 服务，判断其是否符合你的标准，并在发生变化时收到通知。 sshfinder 是一个无第三方依赖的单一 Python 文件。将其指向一个 CIDR 网段，它就能发现 SSH 实际监听的任何位置——不仅仅是 22 端口——确认每个服务确实在运行 SSH 协议，评估其加密安全态势，并在有服务不符合你的策略时返回非零退出码。 它解决的问题 大多数团队无法回答关于自身 SSH 资产状况的三个问题： 1. 我们有多少 SSH 服务，它们在哪里？ 不是问有多少台机器——而是问有多少个 正在监听的 SSH 服务 ，包括那个承包商在 2019 年搭建在 22...

CVE-2020-17144-EXP

CVE-2020-17144-EXP 条件: Exchange2010; 一般ユーザー デフォルトの使い方webshell書き込み: CVE-2020-17144-EXP.exe mail.example.com user pass コマンド実行 & ポート再利用: ExploitClass.csを修正 参照 @zcgonvh...

Malicious code in godsplan (npm)

Running the godsplan 3.0.2 CLI connects to Chrome's debugging port 9222 and injects JavaScript into every open page. It bypasses Content Security Policy and intercepts selected test-page requests. When triggered by a mouse gesture or keyboard shortcut, the injected script collects the page text a...

Linux Distros Unpatched Vulnerability : CVE-2026-100696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver...

DEBIAN-CVE-2026-100696

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CVE-2026-100696

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CVE-2026-100698

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

DEBIAN-CVE-2026-100698

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

CVE-2026-100696

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CVE-2026-100698

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

UBUNTU-CVE-2026-100698

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...