cve-2022-22954

CVE-2022-22954 Ce paquet détecte un sous-ensemble de tentatives et d'exploitations de la CVE-2022-22954, génère une notification, et inclut également l'URI de l'exploit et les premiers 4 Ko des données renvoyées à l'attaquant en réponse. Alors que la détection de cette attaque est plus simple à...

CVE-2023-28432

CVE-2023-28432 Vulnérabilité de divulgation d'informations sensibles de l'interface verify de MinIO CVE-2023-28432 Nom chinois: MinIO verify 接口敏感信息泄露漏洞（CVE-2023-28432） Description : MinIO est un service de stockage d'objets open source compatible avec l'API Amazon S3, pouvant être utilisé dans de...

ch55x_firmware_extractor

Extracteur de firmware CH55x L'extracteur de firmware CH55x est utilisé pour lire le firmware des circuits intégrés CH55x. Il n'existe pas de support intégré dans les appareils pour lire directement le firmware via le bootloader. Cependant, il existe une fonctionnalité permettant de vérifier le...

CVE-2022-22954

CVE-2022-22954 주의 본 도구는 사용자의 책임 하에 사용하시기 바랍니다. 이 저장소는 교육 목적으로만 제공되며, 불법적인 의도는 엄격히 반대합니다. 이 저장소와 관련된 불법 활동에 대해 어떠한 책임도 지지 않습니다. 윤리적으로 사용하세요! 예시 python3 CVE-2022-22954.py -t target.com python3 CVE-2022-22954.py -t 10.10.10.10 Shodan 쿼리 shodan search "http.favicon.hash:-1250474341" --limit 1000 Bash...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

FortiClient EMS - Authentication Bypass

Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior. id:...

CVE-2026-78406

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-78407

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

CVE-2026-78401

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-78388

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2026-78399

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

CVE-2026-19493

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal...

CVE-2026-19878

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps...

CVE-2026-19491

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication...

CVE-2026-19498

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-19494

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...

CVE-2026-19482

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments...

CVE-2026-17189

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

CVE-2026-18740

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform unauthorized actions due to argument injection...

CVE-2026-16916

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure...