3590 matches found
RustScan
➡️ Discorddiscord | Installation Guidetoc-install | Usage Guideusage-guide ⬅️ Fast, smart, effective. !Arch Linux packagebadge-1 !Built with Rustbadge-2 !GitHub All Releasesbadge-3 !Crates.iobadge-4 !Discordbadge-5 !Actionsbadge-6 🤔 What is this? !fastspeed-1 The Modern Port Scanner. Find ports...
CVE-2023-27350
PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start Clone the...
CVE-2024-43044-jenkins
Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine. Check out the full...
CVE-2020-5902-NSE
This repository does not have a README...
CVE-2019-1367
0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...
CVE-2018-8353-POC
CVE-2018-8353 POC Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free saurce : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...
GraphQLmap
GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Install Features and examples Dump a GraphQL schema Interact with a GraphQL endpoint Execute GraphQL queries Autocomplete queries GraphQL field fuzzing Example 1 - Bruteforce a character Examp...
sandmap
sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...
CVE-2025-49844
🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...
nmap-nse-vulnerability-scripts
NMAP vulnerability scanning scripts A collection of nmap vulnerability scanning scripts to aid afforable detection and remediation. Background These scripts use the Nmap Scripting Engine NSE to implement checks for various vulnerabilities. References: https://nmap.org/book/man-nse.html...
nmap-nse-scripts
Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. TODO -Finishing SMB2 NSE library -Currently working on password mangling functionality Paulino Calderon calderonwebsec.mx...
CVE-2026-66088
In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...
CVE-2026-66088
In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...
CVE-2026-66088 Unrestricted Command Execution via system.execute
In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...
EUVD-2026-112564
In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...
CVE-2026-66088
The openEQUELLA application (versions before 2026.1 ) is vulnerable to OS Command Injection due to the system.execute() function in its scripting engine. This function executes supplied operating system commands without any validation or an allow-list of permitted executables. A user with the abi...
PT-2026-130610
Name of the Vulnerable Software and Affected Versions openEQUELLA versions prior to 2026.1 Description The scripting engine contains a flaw where the system.execute function runs operating system commands without validation or an allow-list of permitted executables. A user with permissions to...
CVE-2026-88193
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-88193
A heap-based buffer overflow exists in the Microsoft Scripting Engine , which can be exploited by an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8, indicating a High severity impact on confidentiality, integrity, and av...