73945 matches found
CVE-2020-0796
Usage Make sure Python and ncat are installed. Run calctargetoffsets.bat on the target computer, and adjust the offsets at the top of the SMBleedingGhost.py file according to the script output also see the note below. Run ncat with the following command line arguments: ncat -lvp Where is the port...
CVE-2026-42758
CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit Usage Examples Basic Usage python3 exploit.py https://target.example.com -e [email protected] Specify Webinar Page python3 exploit.py https://target.example.com -e [email protected] -w https://target.example.com/webinar/my-webinar/...
CVE-2026-19650-CVE-2026-19478
cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...
telerik-scanner-cve-2017-9248
Telerik CVE-2017-9248 Vulnerability Scanner V2.0 A comprehensive Python scanner that discovers Telerik endpoints and tests for CVE-2017-9248 cryptographic vulnerability with enterprise-grade bulk scanning capabilities. Features Quick & Discovery Modes: Single path testing or comprehensive discove...
CVE-2026-116684
The Model Context Protocol Python SDK versions 1.10.0 through 1.30.0 and 2.2.0 are vulnerable to a resource-confusion flaw in the server-side bearer authentication. When configured via AuthSettings with token_verifier, the TokenVerifier fails to independently validate the aud audience , causing t...
CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
EUVD-2026-111369
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2023-29923
CVE-2023-29923 1、Prepare a url.txt, for example: 2、Execute python CVE-2023-29923.py -f url.txt 3、Assets detected with unauthorized access vulnerabilities will be saved in the result.txt file in the same directory...
SMBGhost_Scanner
SMBGhost Advanced scanner for CVE-2020-0796 - SMBv3 RCE using ollypwn detection technique SMBGhost. It can scan the entire internet using masscan or, a single ip. It can get more informations about targets using Shodan API key required and write results to json file. Otherwise, it will print...
CVE-2026-50055
cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...
CVE-2018-2628all
CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: 192.168.31.1:443 192.168.31.100:443 Save it as url.txt in the same directory and run the script. Please comment on the output effect yourself! Execute like this: The program works fine under Deepin, but not under Ubuntu on Win10,...
Open-Redirect-Finder
Open-Redirect-Finder Open Redirect Finder is an automation tool used to detect open redirect vulnerabilities on a URL. Features Batch Processing: Supports testing multiple URLs at once from an input file. Automatic Validation: Checks whether the entered URLs are vulnerable to open redirects...
CVE-2019-5029
CVE-2019-5029 This is a Python script PoC for CVE-2019-5029. It is a RCE for Exhibitor Web UI 1.7.1. How to use Clone this repo git clone https://github.com/yZ1337/CVE-2019-5029.git Execute as follows python3 CVE-2019-5029.py Make sure the request inside the script is the same as the request of t...
TIDoS-Framework
TIDoS The Offensive Web Application Penetration Testing Framework. IMPORTANT : The new Qt5 interface is complete, but has additional dependencies. Take a look at the updated installation instructions. Highlights :- Here is some light on what the framework is all about: A complete versatile...
CVE-2026-94545
cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...
CVE-2012-2982_Python
CVE-2012-2982Python PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting This is the metasploit CVE: https://www.exploit-db.com/exploits/21851 Those are the changes done after the discovery of the Exploit:...
CVE-2026-65320-fastcore
CVE-2026-65320: Path Traversal Tar Slip in fastcore via untardir Severity: Critical, CVSS 3.1 9.8 Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected: fastcore = 2.2.30 Fixed in: Not fixed at time of writing CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory,...
pftriage
pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...