nmap-nse-vulnerability-scripts

NMAP भेद्यता स्कैनिंग स्क्रिप्ट्स nmap भेद्यता स्कैनिंग स्क्रिप्ट्स का एक संग्रह जो किफायती पता लगाने और उपचार में सहायता करता है। पृष्ठभूमि ये स्क्रिप्ट्स विभिन्न भेद्यताओं की जाँच लागू करने के लिए Nmap स्क्रिप्टिंग इंजन NSE का उपयोग करती हैं। संदर्भ: https://nmap.org/book/man-nse.html...

CVE-2024-43044-jenkins

Introdução Este é um exploit para CVE-2024-43044, uma leitura arbitrária de arquivos que permite a um agente buscar arquivos do controlador. O exploit usará a vulnerabilidade para ler arquivos e forjar um cookie de 'remember-me' para uma conta de administrador, obtendo acesso ao mecanismo de scri...

RustScan

➡️ Discorddiscord | इंस्टॉलेशन गाइडtoc-install | उपयोग गाइडusage-guide ⬅️ तेज़, स्मार्ट, प्रभावी। !Arch Linux packagebadge-1 !Built with Rustbadge-2 !GitHub All Releasesbadge-3 !Crates.iobadge-4 !Discordbadge-5 !Actionsbadge-6 🤔 यह क्या है? !fastspeed-1 आधुनिक पोर्ट स्कैनर। पोर्ट्स को तेज़ी से...

GraphQLmap

GraphQLmap GraphQLmap é um motor de script para interagir com um endpoint GraphQL para fins de teste de penetração. Install Funcionalidades e exemplos Despejar um esquema GraphQL Interagir com um endpoint GraphQL Executar consultas GraphQL Autocomplete de consultas Fuzzing de campo GraphQL Exempl...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Execução Remota de Código Crítica no Armazenamento In-Memory Mais Rápido do Mundo A script Lua do Redis acaba de se tornar a zona de pouso perfeita pós-autenticação. Atacante autenticado → script Lua artesanal → fuga da sandbox → RCE total no host ⚠️ Visão Geral...

CVE-2018-8353-POC

CVE-2018-8353 POC PoC simples de CVE-2018-8353 Microsoft Scripting Engine Uso Após Liberação fonte : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350 के लिए एक सरल बैश एक्सप्लॉइट। यह स्क्रिप्ट प्रमाणीकरण बाइपास, वातावरण तैयारी, और PaperCut प्रिंटर स्क्रिप्टिंग इंजन के माध्यम से कमांड इंजेक्शन को स्वचालित करता है। दृश्य प्रमाण बुनियादी RCE: रिवर्स शेल ट्रिगर करना: त्वरित आरंभ Clone the repository...

CVE-2019-1367

0x00 Introdução ao Contexto Internet Explorer é um navegador web lançado pela Microsoft. Possui uma enorme base de usuários. Em 23 de setembro, a Microsoft lançou uma atualização de segurança urgente para corrigir uma vulnerabilidade de execução remota de código que afeta o Internet Explorer. A...

CVE-2020-5902-NSE

Este repositorio nao tem um README...

nmap-nse-scripts

مستودع لتطوير NSE محرك البرمجة النصية لـ Nmap. ستجد هنا سكربتاتي بما في ذلك غير الرسمية منها، والمكتبات، والموارد، وغيرها من المواد ذات الصلة من ورش العمل التي أقدمها. TODO -إنهاء مكتبة SMB2 الخاصة بـ NSE -أعمل حالياً على وظيفة تحوير كلمات المرور Paulino Calderon calderonwebsec.mx...

CVE-2026-84858 Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

PT-2026-93804

Name of the Vulnerable Software and Affected Versions ScadaLTS version 2.8.1-release-candidate build 0 Description An authenticated remote code execution issue exists due to a scripting sandbox bypass. The DWR "DataSourceEditDwr" class exposes the validateScript function, which compiles and...

CVE-2026-84858: Improper Control of Generation of Code

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 147.0.7727.55 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-18708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed withi...

Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...

EUVD-2026-62937

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-72712

A flaw was found in Nmap. A remote attacker can exploit this denial of service vulnerability by sending a specially crafted packet that includes a zero-length Transmission Control Protocol TCP option. This malformed packet forces the application to enter an infinite loop during packet processing,...