34 matches found
mass_cve-2021-41773
masscve-2021-41773 批量 CVE-2021-41773 截图 用法！ python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool 注意！ 结果将自动保存到 vuln.txt 中 你可以在 https://github.com/justakazh/masscve-2021-41773/blob/4579bdbbda666b47b40116518d3fc5729574a2f8/cve-2021-41773.pyL49 添加公共目录 参考...
CVE-2020-7799
cve-2020-7799 批量检测cve-2020-7799 在同目录下添加一个text.txt文件 文件内url格式如下所示： www.baidu.com 132.231.132.132 133.12.122.13:8080 运行即可python3 cve-2020-7799.py 注意：禁止使用本项目所有资源进行非法测试！...
ms15-034-Scan
ms15-034-scan python3 批量扫ms15-034/CVE-2015-1635漏洞 用法 root@kitploit: python3 ms-socket.py url.txt 自行添加资产到url.txt中 输出result.txt 未加去除http://和https:// 自行记事本ctrl+h替换...
CVE-2021-41773
CVE-2021-41773 快速Python工具，用于测试URL列表中的Apache路径遍历漏洞CVE-2021-41773 使用方法 :- 创建一个存活的URL文件，并使用"-l"标志 python3 apachepathtraversal.py -l urls-list.txt...
CVE-2020-3187-Scanlist
CVE-2020-3187-Scanlist - Cisco 批量扫描站点。 免责声明： 我对使用此工具或任何损害不承担责任，切勿将其用于非法目的。 此工具旨在扫描已授权资产，以自动检查多个 Cisco 实例上的此漏洞。 安装： git clone https://github.com/sunyyer/CVE-2020-3187-Scanlist.git chmod +x CVE-2020-3187.py 添加 urls.txt，其中包含格式为 https://xx.xx 的 URL。 用法： python3 ./CVE-2020-3187.py urls.txt...
CVE-2020-8193-Citrix-Scanner
CVE-2020-8193-Citrix-Scanner CVE-2020-8193 扫描器 - 认证绕过检查 https://vulners.com/cve/CVE-2020-8193 支持文档： https://research.nccgroup.com/2020/07/10/rift-citrix-adc-vulnerabilities-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-intelligence/ https://dmaasland.github.io/posts/citrix.html 免责声明：...
phishurl-list
Conjunto de dados de URLs de phishing do JPCERT/CC Detalhes das colunas date: Data confirmada pelo JPCERT/CC URL: URL completa de um site de phishing description: Informações sobre uma marca falsificada Página de estatísticas https://jpcertcc.github.io/phishurl-list/...
CVE-2025-66459
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnerability can be triggered when a user submits a list of URLs to capture, one of them contains a HTML element, and the capture fails. Then, t...
CVE-2019-18370
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
SUSE CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors...
RHSA-2025:0300
creationtimestamp| type| source ---|---|--- 2024-11-16 15:59:00+00:00| seen| https://bugzilla.redhat.com/showbug.cgi?id=2328846 2025-01-14 08:38:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113825801178667187 2025-01-14 08:38:10+00:00| seen|...
Improper Validation of Unsafe Equivalence in Input
Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the srcset attribute, which allows bypassing the imgSrcSanitizationTrustedUrlList allowlist. An attacke...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Owncloud Graph_Api
CVE-2023-49103 PoC for the CVE-2023-49103 Overview This Py...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...
Secretx - Extracting API Keys And Secrets By Requesting Each URL At The Your List
Extracting api keys and secrets by requesting each url at the your list. Installation python3 -m pip install -r requirements.txt Usage python3 secretx.py --list urlList.txt --threads 15 optional arguments: --help --colorless Credits Thanks to @m4ll0k for patterns and @choudhary1337 inpsiring for...
CORStest - A Simple CORS Misconfiguration Scanner
A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...
Command injection
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
