eternalghosttest

Eternalghost ドイツ語 英語 ドイツ語 このリポジトリにはCVE-2020-0796のテストケースが含まれています。 この小さなスクリプトを使用することで、あなたのサーバーが脆弱かどうかを確認できます。スクリプトは、ネゴシエートリクエストを介して、圧縮機能とSMBバージョン3.1.1をチェックします。 このスクリプトの使い方 python3 eternalghost.py IP 回避策 MicrosoftのSMBv3圧縮無効化に関するアドバイザリ - 英語 Set-ItemProperty -Path...

CVE-2025-29927-Testing

CVE-2025-29927 のテストスクリプト CyberMaxx 提供。 CVE-2025-29927 テスター この PowerShell スクリプトは、セキュリティ研究者やシステム管理者が Next.js アプリケーションの CVE-2025-29927 脆弱性をテストするために設計されています。Next.js のバージョンを確認し、ミドルウェア実装の潜在的なセキュリティリスクをテストすることで、ターゲットアプリケーションがミドルウェアバイパスの問題に対して脆弱かどうかをチェックします。 機能: ヘッダー検査: ターゲット URL から HTTP ヘッダーを取得し、Next.js...

testanull-CVE-2021-22005.py

このリポジトリには README がありません。...

CVE-2014-0346

CVE-2014-0160 Heartbleed テストスクリプト このスクリプトは、SSL/TLS サーバーにおける悪名高い Heartbleed 脆弱性 CVE-2014-0160 をチェックします。 📜 クレジット オリジナルスクリプト: Jared Stafford [email protected] 教育および研究目的で Songül Kızılay が修正・更新 ⚠️ 免責事項 このツールは教育目的および許可を得たテスト専用 に提供されています。 明示的な許可なくシステムに使用しないでください。無断スキャンは違法であり、倫理に反します。 📝 ライセンス MIT...

test_cve-2023-46747

Pythonスクリプトで、F5 BIG-IPがCVE-2023-46747に対して脆弱かどうかをテストします。脆弱な場合、管理者権限を持つユーザーアカウントが追加されます。この脆弱性を緩和するには、https://my.f5.com/manage/s/article/K000137353 を参照してください。...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco自适应安全设备软件 - 本地文件包含漏洞测试脚本 用法 root@kitploit: python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP 默认: 80/tcp python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP Port 用户自定义端口...

PT-2026-63536

Name of the Vulnerable Software and Affected Versions Search API Autocomplete versions 0.0.0 through 1.12.0 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS, a flaw where malicious scripts are injected into a web page and reflected...

CVE-2026-41064

WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's test.php adds escapeshellarg for wget but leaves the filegetcontents and curl code paths unsanitized, and the URL validation regex /^http/ accepts strings like httpevil.com. Commit...

CVE-2026-44723 Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner

Vowpal Wabbit is a machine learning system. The workflow .github/workflows/pythonchecks.yml embeds $ github.event.pullrequest.title directly inside double-quoted bash strings in four separate steps across four jobs, each passing it as a CLI argument to the Python test script...

Invincibility

CVE POC Collection Validated Proof-of-Concept exploits for CV...

CVE-2026-9302 546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/command/VpsTest.php of the component VpsTest Console. Executing a manipulation of the argument vf can lead to code...

CVE-2026-35449

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

CVE-2026-35449 WWBN AVideo has Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.php

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

CVE-2026-35449

WWBN AVideo, versions 26.0 and prior, has an unauthenticated information disclosure via the install/test.php diagnostic script. The CLI-only guard is disabled, allowing HTTP access to the script and exposure of viewer IPs, session IDs, and user agents to unauthenticated visitors. Remediation per ...

CVE-2026-35449

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

CVE-2026-35449 WWBN AVideo has Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.php

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

Information Exposure

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Information Exposure via the install/test.php script when the command-line interface guard is disabled. An attacker can access sensitive information such as viewer...

Server-side Request Forgery (SSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the statsURL parameter in the plugin/Live/test.php endpoint. An administrator can access sensitive internal resources and clou...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56703)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56703 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6selectpath...

CLSA-2026-1768300368 Fix CVE(s): CVE-2025-58436

SECURITY UPDATE: fix DoS by a client that connect to cupsd sends slow messages. - debian/patches/CVE-2025-58436.patch: fix unresponsive cupsd process caused by a slow client. - CVE-2025-58436. Fix test/run-stp-tests.sh - debian/patches/waiting-limit.patch: limit the waiting for a server dunring...