CVE-1999-0524

CVE-1999-0524 A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure CVE-1999-0524. How to use 1. Make sure hping3 is installed and in your PATH. 2. Create a file that contains the targets, in IPv4 format and each target on a new line. 3. Make the script...

hackviser_labs_CVE-2015-3306

hackviserlabsCVE-2015-3306 Este es un script personalizado para ayudar a resolver el laboratorio de ejecución remota de código bajo el laboratorio CVE-2015-3306. Ejecútalo usando el siguiente comando: python3 exploit.py Reemplaza con la dirección que obtuviste al iniciar el laboratorio en la...

CVE-2025-36911-Wisper_Pair_Target_Finder

This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! Tested only on Debian Based Distros using python3 Usage: sudo apt update && sudo apt install python3 && sudo apt install git...

CVE-2022-1592

CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...

Hybrid Submit

Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...

it-sec-toolshell

ToolShell — SharePoint 零日演示 一个关于 CVE-2025-53770 的 Marp 幻灯片集，每张幻灯片都保存在 slides/ 下的单独文件中。 构建 ./build.sh 组装幻灯片为 presentation.md ./build.sh html + 渲染 presentation.html ./build.sh pdf + 渲染 presentation.pdf ./build.sh all + HTML、PDF 以及每张幻灯片的 PNG 预览 脚本会按需使用 npx 获取 @marp-team/marp-cli — 无需全局安装。 项目布局...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 - Comprobador Desde aquí 1. La forma más rápida de comprobar es ejecutar lo siguiente. curl -Ls https://raw.githubusercontent.com/pentestfunctions/CVE-2024-3094/main/checker.sh | sh...

CVE-2026-46300

Security Research & Legal Disclaimer This repository is for educational and authorized security research purposes only. Permitted Use Understanding security vulnerabilities and exploitation concepts in controlled environments local VMs, isolated labs Studying sandbox isolation mechanisms and thei...

dirtycups

dirtycups.py Dirty CUPS es un escáner gratuito de CVE para Linux/Unix script en Python3 que permite validar si un objetivo es vulnerable a CVE-2024-47176. Este es un escáner de CUPS basado únicamente en sockets, tomado de cupsscanner.py de MalwareTech:...

CVE-2025-12163

CVE-2025-12163: Stored Cross-Site Scripting in Omnipress WordPress Plugin Table of Contents Overview Vulnerability Details Technical Analysis Attack Vector Remediation Guide CVSS Metrics References Security Contact Overview Omnipress WordPress Plugin Stored XSS Vulnerability CVE-2025-XXXXX - A...

CVE-2021-4044

Script de verificación SSL Este repositorio contiene un script en Python que verifica la versión de OpenSSL en su sistema y prueba las conexiones SSL/TLS a un sitio web proporcionado por el usuario. El script está diseñado para identificar si el sistema está afectado por CVE-2021-4044 y para prob...

dns-zone-audit

DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...

CVE-2026-12559: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized script content in a user's browser, potentially impacting...

CVE-2026-4638: Generation of Error Message Containing Sensitive Information

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2026-96515: Missing Authorization

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

CVE-2026-93405: Improper Neutralization of Input During Web Page Generation

Mailspring is a fast, cross-platform, open-source email client. Prior to 1.17.0, attachment quick preview converts Markdown, DOCX, and XLSX attachments with Snarkdown, Mammoth, and SheetJS and inserts the resulting HTML into the preview document through innerHTML without sanitization. A remote...

CVE-2026-80412

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation...

CVE-2026-80412 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation...

CVE-2026-80412

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote code execution due to improper escaping of connector property values during OSH script generation. A remote authenticated attacker could exploit this flaw to execute arbitrary code. No specific exploit details or remediation step...

defender

🛡️ Linux-Defender.sh 📝 Table of Contents 📌 Overview 🚀 Features 🐧 Supported Distros 📦 Tools Installed ⚙️ Installation Building from Source General 📦 Package Installation Debian .deb Package Arch Linux Package 🧰 Running the Defender 🧾 License 🙋‍♂️ Author ☕ Support & Contribution 📌 Overview Linux...