CVE-2000-0114

Distintivos Licença MIT Instalação 1. Instale Python3 e pip Instruções aqui Se você não conseguir fazer isso, realmente não deveria estar usando isso Instalar via pip pip install CVE-2000-0114 Execute o comando abaixo para verificar CVE-2000-0114 -h Configurações 2. Integramos com a API do Telegr...

CVE-2021-26084

CVE-2021-26084 Confluence - Execução Remota de Código RCE Code By:Junsheng @橘子网络安全实验室 橘子网络安全实验室 https://0range.team/ 0x00 Visão Geral dos Riscos Esta ferramenta é destinada apenas para testes de segurança autorizados. É proibido usar para ataques não autorizados em sites. Leia online a Lei de...

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit é uma ferramenta de teste de segurança baseada em Python que automatiza a detecção de potenciais condições de RCE em aplicações web sob ambientes autorizados. Ela envia requisições POST elaboradas para alvos, analisa as respostas do servidor em busca de...

CVE-2025-55182

CVE-2025-55182 Next.js RCE दोहन उपकरण 🚀 यह Next.js React Server Components CVE-2025-55182 रिमोट कोड निष्पादन RCE कमजोरी के लिए एक स्वचालित प्रूफ-ऑफ-कॉन्सेप्ट PoC उपकरण है। यह उपकरण इंटरैक्टिव Shell , स्मार्ट प्रोटोकॉल पहचान और मल्टी-थ्रेडेड बैच स्कैनिंग कार्यक्षमताओं को एकीकृत करता है, जो सुरक्षा...

Zack-LocalScan

Zack-LocalScan English | 简体中文 Zack-Loc...

Vulnerability-assessment

Instalação & Uso Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Importante: Use este script apenas contra sistemas para os quais você...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

CVE-2026-105214: Server-Side Request Forgery (SSRF)

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

PT-2026-104638

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

CVE-2026-82040

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-82040

UTMStack versions before 11.2.16 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability within the IdentityProviderService.validateMetadataUrl() function. Authenticated attackers can exploit the POST/PUT /api/identity-providers endpoint because the application fails to validate the...

CVE-2026-82040 UTMStack < 11.2.16 SSRF via IdentityProviderService

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

EUVD-2026-91792

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-82040 UTMStack < 11.2.16 SSRF via IdentityProviderService

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-104994

Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning on untrusted input e.g., upon a third-party pull request that contains a Terraform configuration, if sensitive data c...

CVE-2026-104861 probe-image-size: Quadratic-time Denial of Service in the SVG Parser

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

semgrep v1.179.0

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

klara

GReAT's KLara project KLara project is aimed at helping Threat Intelligence researchers hunt for new malware using Yara. In order to hunt efficiently for malware, one needs a large collection of samples to search over. Researchers usually need to fire a Yara rule over a collection / set of...

PT-2026-104435

Name of the Vulnerable Software and Affected Versions UTMStack versions prior to 11.2.16 Description An authenticated attacker can trigger a server-side request forgery SSRF by providing a malicious metadata URL to the POST/PUT /api/identity-providers endpoint. This occurs because the...