Mass-CVE-2023-3460

Mass-CVE-2023-3460 CVE 2023 3460 の大量スキャン。 使い方 mass-CVE-2023-3460.py list.txt クレジット https://github.com/gbrsh/CVE-2023-3460...

CVE-2020-6308-mass-exploiter

CVE-2020-6308-mass-exploiter CVE-2020-6308 大量エクスプロイター/ファザー。 使用方法: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

WP-CVE-2023-32243

...

nlist

nList 各種ツールで使用するためのターゲットリストを生成するNmapスクリプトです。 インストール このスクリプトをすべてのスクリプトスキャン（-sC）の一部としてデフォルトで実行するには、Nmapデータディレクトリのscriptsサブディレクトリにnlist.confファイルと一緒に保存する必要があります。 ユーザーのホームディレクトリに配置された.nlistファイルは、nlist.config引数で別の設定ファイルが指定されていない場合、デフォルトのnlist.confファイルの代わりに使用されます。 使用方法 バージョンスキャン（-sV）の一部として実行すると最も効果的です。...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit このリポジトリには、CVE-2025-55182 の完全なエクスプロイト（RCE 対応）が含まれています。 エクスプロイトを実行する手順 1. 依存関係のインストール pip install -r requirements.txt 2. エクスプロイトの実行 python3 exploit.py targetlist.txt "command"...

Exploit for Missing Authentication for Critical Function in Cpanel

POCCVE-2026-41940 Quick start bash python3 pocCVE-202...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013372 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011174 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows:...

Iran Threatens to Start Attacking Major US Tech Firms on April 1

Tech giants like Apple, Google, and Microsoft are among those on a target list released by Iran’s Islamic Revolutionary Guard Corps...

EUVD-2022-55858

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

CVE-2022-50840 scsi: snic: Fix possible UAF in snic_tgt_create()

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

CVE-2022-50840

The CVE-2022-50840 issue affects the Linux kernel SCSI driver snic: the code path snic_tgt_create() could trigger a use-after-free if device_add() fails, because tgt->list was not removed from snic->disc.tgt_list before freeing. The fix removes the tgt from snic->disc.tgt_list prior to f...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Mass Payload Attack React2Shell A modified M...

SAP-Nuclei-Templates

SAP-Nuclei-Templates Nuclei Templates fo...

Exploit for SQL Injection in Bplugins Html5_Video_Player

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in Wo...

DDoSia Attack Tool Evolves with Encryption, Targeting Multiple Sectors

The threat actors behind the DDoSia attack tool have come up with a new version that incorporates a new mechanism to retrieve the list of targets to be bombarded with junk HTTP requests in an attempt to bring them down. The updated variant, written in Golang, "implements an additional security...

Do you know your OpSec?

Open Source Intelligence OSINT is any information in the public domain that an attacker can dig up about you. Because of that it forms the basis of every Red Team engagement, as threat actor scenarios are created using publicly available information. Bearing that in mind it makes sense to review...

TrickBot Banking Trojan Adds New Browser Manipulation Tools

The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...

Shylock Trojan Going Global with New Features, Resilient Infrastructure

The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attack...