nmap-nse-vulnerability-scripts

Scripts de verificação de vulnerabilidades do NMAP Uma coleção de scripts de verificação de vulnerabilidades do nmap para auxiliar na detecção e correção acessível. Contexto Estes scripts usam o Nmap Scripting Engine NSE para implementar verificações de várias vulnerabilidades. Referências:...

CVE-2024-43044-jenkins

Introdução Este é um exploit para CVE-2024-43044, uma leitura arbitrária de arquivos que permite a um agente buscar arquivos do controlador. O exploit usará a vulnerabilidade para ler arquivos e forjar um cookie de 'remember-me' para uma conta de administrador, obtendo acesso ao mecanismo de scri...

RustScan

➡️ Discorddiscord | Guia de Instalaçãotoc-install | Guia de Usousage-guide ⬅️ Rápido, inteligente, eficaz. !Arch Linux packagebadge-1 !Built with Rustbadge-2 !GitHub All Releasesbadge-3 !Crates.iobadge-4 !Discordbadge-5 !Actionsbadge-6 🤔 O que é isto? !fastspeed-1 O Moderno Scanner de Portas...

GraphQLmap

GraphQLmap GraphQLmap ist eine Scripting-Engine zur Interaktion mit einem GraphQL-Endpoint für Pentesting-Zwecke. Installation Funktionen und Beispiele GraphQL-Schema auslesen Mit einem GraphQL-Endpoint interagieren GraphQL-Abfragen ausführen Autovervollständigung von Abfragen GraphQL-Feld-Fuzzin...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Execução Remota de Código Crítica no Armazenamento In-Memory Mais Rápido do Mundo A script Lua do Redis acaba de se tornar a zona de pouso perfeita pós-autenticação. Atacante autenticado → script Lua artesanal → fuga da sandbox → RCE total no host ⚠️ Visão Geral...

CVE-2018-8353-POC

CVE-2018-8353 POC PoC simples de CVE-2018-8353 Microsoft Scripting Engine Uso Após Liberação fonte : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 Um exploit Bash simplificado para CVE-2023-27350. Este script automatiza o bypass de autenticação, a preparação do ambiente e a injeção de comandos por meio do mecanismo de script da impressora PaperCut. Prova Visual RCE básica: Acionando um shell reverso: Início...

CVE-2019-1367

0x00 Introdução ao Contexto Internet Explorer é um navegador web lançado pela Microsoft. Possui uma enorme base de usuários. Em 23 de setembro, a Microsoft lançou uma atualização de segurança urgente para corrigir uma vulnerabilidade de execução remota de código que afeta o Internet Explorer. A...

CVE-2020-5902-NSE

Este repositorio nao tem um README...

nmap-nse-scripts

Repositório para o desenvolvimento de NSE Nmap Scripting Engine. Você encontrará meus scripts incluindo os não oficiais, bibliotecas, recursos e outros materiais relacionados dos meus workshops. TODO -Finalizando a biblioteca NSE SMB2 -Atualmente trabalhando na funcionalidade de mangling de senha...

CVE-2026-84858 Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

PT-2026-93804

Name of the Vulnerable Software and Affected Versions ScadaLTS version 2.8.1-release-candidate build 0 Description An authenticated remote code execution issue exists due to a scripting sandbox bypass. The DWR "DataSourceEditDwr" class exposes the validateScript function, which compiles and...

CVE-2026-84858: Improper Control of Generation of Code

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 147.0.7727.55 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-18708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed withi...

Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...

EUVD-2026-62937

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-72712

A flaw was found in Nmap. A remote attacker can exploit this denial of service vulnerability by sending a specially crafted packet that includes a zero-length Transmission Control Protocol TCP option. This malformed packet forces the application to enter an infinite loop during packet processing,...