111069 matches found
CVE-2026-80177
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected by an SQL Injection vulnerability. A low-privileged attacker with remote access could exploit this to achieve script injection , resulting in high confidentiality impact with n...
EUVD-2026-74762
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...
CVE-2026-80055
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions contain an LDAP Injection vulnerability in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access could exploit this flaw to achieve script injection . The CNA-a...
CVE-2026-80055
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit thi...
CVE-2026-80055
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit thi...
EUVD-2026-74761
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit thi...
msxml4-remediation
MSXML 4.0 Remediation PowerShell PowerShell script to remediate security findings related to Microsoft XML Core Services MSXML 4.0 , which is unsupported and commonly flagged by vulnerability scanners. This script I made unregisters the .dll files for MSXML 4 and renames them. This remediates the...
rtf_exploit_extractor
rtfexploitextractor Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents root@kitploit: usage: rtfexploitextract.py -h -o OUTFILE -d DECOY -l LENGTH -v inputfile inputfile exploit document to examine optional arguments: -h, --help show this help message and...
CVE-2025-15690 Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewi...
cve-2021-3157
cve-2021-3156 Script kiddie turns out to be me?...
CVE-2020-7961-Mass
CVE-2020-7961-Mass CVE-2020–7961 Exploit masivo para Script Kiddies Probado en: Kali Linux, Windows,... Requisitos: apt install python3 pip3 install requests colorama Uso: python3 rce.py target url | Para un solo objetivo python3 mass.py list url | Para una lista de objetivos Saved file to:...
CVE-2022-41544
CVE-2022-41544 Exploit script for CVE-2022-41544 - RCE in get-simple CMS Usage Usage: python3 CVE-2022-41544.py Example...
cve-2019-19781
CVE-2019-19781 该内容仅因其他研究人员率先公开其代码而上传。我们原本希望将其保密更长时间，让防御者有足够时间修补系统。 我们完全支持负责任的披露，但在此案例中，秘密已经泄露。 漏洞利用：CVE-2019-19781 Citrixmash CVE-2019-19781 利用工具 root@stronghold-nix:/home/relik/Desktop/git/cve-2019-19781 python citrixmash.py Citrixmash v0.1 - 利用 Citrix 目录遍历漏洞：CVE-2019-19781 工具编写者：Rob Simon 与 Dav...
EUVD-2026-75129
An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mailbox annotations, by observing which fileinto branch fired...
PT-2026-89061
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
CVE-2026-61911
An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mailbox annotations, by observing which fileinto branch fired...
CVE-2026-61911
An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mailbox annotations, by observing which fileinto branch fired...
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco Secure Firewall Management Center FMC Software and Cisco Security Cloud Control SCC Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on...
heartbleed-poc
HeartBleed 测试与利用工具 注意 目前几乎所有工具（nmap、metasploit、nessus，甚至burp）都已拥有最新版本的扫描器。这些工具是在早期工具仍在开发时发布的。现在请优先使用那些工具，而非这些。 工具指南 若要进行大规模扫描，目前NMAP脚本是最佳选择。 如需支持最多的协议（STARTTLS），请使用修改后的Metasploit脚本。 若要进行实际利用，请使用Python脚本（针对非SMTP的STARTTLS需要修改）。 Python 工具 用法: heartbleed-poc.py server options 测试SSL心跳漏洞 CVE-2014-0160...