ATSCAN

ATSCAN SCANNER Advanced Mass Search / Dork / Exploitation Scanner | Alisam Technology is not responsible for any misuse, damage caused by this script or attacking targets without prior mutual consent! It is your responsibility to obey laws! ---|--- Codename:| 4n0n4t ---|--- AUTHOR:| Ali MEHDIOUI...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...

PadBuster

PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...

dnsenum

README - dnsenum.pl VERSION: 1.2.4 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: 1 Get the host's addresse A record. 2 Get the namservers threaded. 3 Get the MX record threaded. 4 Perform axfr queries on nameservers and ge...

Important: Red Hat Security Advisory: perl-CGI security update

An update for perl-CGI is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

perl-cgi: perl-cgi: Security feature bypass via untainted request parameters

A flaw was found in perl-cgi. When running under Perl's taint mode—a security feature that prevents untrusted data from being used in sensitive operations—the module returns several request-derived values without taint flags. A remote attacker could exploit this vulnerability by submitting crafte...

perl-cgi: perl-cgi: Denial of Service via unenforced request and upload limits

A flaw was found in perl-cgi. A remote attacker can trigger a Denial of Service DoS through excessive memory, processor, and disk space consumption by sending specially crafted HTTP requests. Due to missing or unenforced limits on request sizes, parameters, and file uploads, the module processes...

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 test program This remote command execution vulnerability in webmin, roughly caused by perl's qx/…/ leading to command execution, requires certain special conditions. During reproduction, I casually wrote a graphical exploit program. It is worth noting that the user...

Th3inspector

🚀🚀🔥🔥🔥CHECK MY NEW PRO PRIVATE TOOL 🔥🔥🔥🔥🚀🚀https://XAttackerV50.Pro Th3inspector Tool 🕵️ Th3inspector 🕵️ best tool for Information Gathering 🔎 ⭐ All in one tool for Information Gathering ⭐ Th3inspector 🕵️ best tool for Information Gathering 🔎 Screenshots Video Usage Short Form | Long Form |...

enum4linux

enum4linux A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information from Windows and Samba systems. It attempts to offer similar functionality to enum.exe formerly available from www.bindview.com. It is written in Perl and...

CVE-2026-116326

A flaw was found in PostgreSQL. An authenticated user with permissions to create database objects can exploit uncaught exceptions within the PL/Perl language extension by supplying a crafted Perl object while an existing error is being handled. This issue leads to the reuse of stale memory buffer...

CVE-2026-116320

A flaw was found in PostgreSQL. An authenticated database user can achieve arbitrary code execution with the privileges of the operating system user running the database due to a use-after-free vulnerability in the PL/Perl procedural language. This issue occurs when the final reference to a Perl...

CVE-2026-116319

A flaw was found in PostgreSQL. An authenticated database user with permission to create objects can trigger a use-after-free memory flaw in the PL/Perl procedural language extension through reentrant returnnext calls. This vulnerability allows the user to execute arbitrary code on the host syste...

CVE-2026-116309

A flaw was found in PostgreSQL. A type confusion vulnerability in the PL/Perl Procedural Language/Perl extension may allow an authenticated database user to achieve arbitrary code execution. By passing an unexpected data reference type into an internal array structure PostgreSQL::InServer::ARRAY,...

CVE-2026-116307

A flaw was found in PostgreSQL. A use-after-free memory flaw in the PL/Perl plperl procedural language extension allows an authenticated database user with object creation privileges to execute arbitrary code as the operating system user running the database service. This issue occurs when...

CVE-2019-15107

CVE-2019-15107 POC for CVE 2019-15107 Use for educational purpose only. To use, opena listener on your machine nc -lnvp Modify the perl command to match your ip and port. Launch the script, a reverse shell will open on your listener. The python script will timeout, this is expected...

CVE-2026-126673

Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...

CVE-2026-116326

PostgreSQL plperl is vulnerable to uncaught exceptions that can cause the use of a stale sigjmp_buf . This occurs when an object creator utilizes a tied Perl object, or when a Perl object's overloaded conversion throws an exception while plperl is already processing another error. This vulnerabil...

Mailcow-CVE-2022-31138

Mailcow CVE-2022-31138 RCE and Domain Admin privilege escalation for Mailcow. POC for CVE-2022-31245 can be modified to work with this vulnerability. Reported and fixed: 2022-06 Code Injection, RCE Type: Code Injection CWE-94, RCE, Domain Takeover Affected versions: least 2019 - 2022-06a A flaw...