CVE-2020-0796-POC

CVE-2020-0796-POC 受影响系统版本 漏洞不影响win7，漏洞影响Windows 10 1903之后的各个32位、64位版Windows，包括家用版、专业版、企业版、教育版。 Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server, Version 1903 Server Core installation Windows 10...

liblzma-scan

Este repositorio no tiene un README...

log4j-quick-scan

log4j-quick-scan Escanea tu red IP y determina hosts con posible vulnerabilidad CVE-2021-44228 en la librería log4j. Existen herramientas mucho mejores y más avanzadas para auditoría de seguridad, pero muchas requieren software comercial de penetración o servicios o software externos de terceros...

xz-backdoor-scan

Busca archivos que contengan la firma de la puerta trasera de xz CVE-2024-3094. Escanea rápidamente archivos e informa de cualquier archivo que contenga la firma utilizada en la puerta trasera. ADVERTENCIA: No confíe en que este programa sea correcto o le alerte sobre la presencia de una puerta...

proteus

Proteus Proteus: la base de datos y API de axiom https://github.com/pry0cc/axiom. Originalmente, escrito para Creando una plataforma ASM con las herramientas de ProjectDiscovery. Configuración Primero, clona el repositorio root@kitploit: git clone https://github.com/pry0cc/proteus /.proteus cd...

EUVD-2026-71230

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

CVE-2026-85609 Openpanel before 2.3.0 SSRF via Site Checker Endpoint

Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery SSRF vulnerability in the GET /tools/site-checker endpoint apps/api/src/controllers/tools.controller.ts. The endpoint passes a user-supplied url query parameter to fetchWithRedirects and performs server-side...

CVE-2026-13148 Memory leak in scan method

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

CVE-2026-13148

CVE-2026-13148 is a memory leak in the scan method of Softing smartLink (HW-PN), where memory is not released after its effective lifetime. This allows a resource leak exposure. The affected versions are from 1.04 before 1.10 . The vulnerability is rated CVSS 4.0 6.3 (MEDIUM) , with a HIGH impact...

PT-2026-85547

Name of the Vulnerable Software and Affected Versions goose versions prior to 1.38.0 Description The software executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. This occurs because the recipe security scan skips these two fields, allowing...

agent-scan v0.6.1

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...

CVE-2026-84809

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

CVE-2026-84810

claude-skill-antivirus (v2.1.3) performs a manifest-only scan of local skill directories, reading only the SKILL.md file while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills embedding malicious executable payloads in non-manifest fi...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

EUVD-2026-70224

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

EUVD-2026-68009

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sending a crafted POST request to /cgi-bin/cstecgi.cgi...