24 matches found
CVE-2024-7928
CVE-2024-7928: FastAdmin V1.3.4.20220530 任意文件读取漏洞 CVEHunter 工具用于检测和利用 CVE-2024-7928 漏洞，以精确且异步并发的方式（优于其他 PoC）检索 FastAdmin 实例的数据库详细信息。 安装 git clone https://github.com/th3gokul/CVE-2024-7928.git cd CVE-2024-7928 pip install -r requirements.txt python3 cvehunter.py --help 用法...
Next.JS-CVE-2025-29927
Next.js 漏洞扫描器 CVE-2025-29927 用于检测和验证易受 CVE-2025-29927（认证绕过）攻击的 Next.js 应用程序的安全工具。 特性 🎯 通过多种验证方法准确检测 Next.js 🔍 精确版本比对，识别易受攻击的实例 🛡️ 漏洞验证零误报 🚀 高性能并发扫描 📊 多种输出格式（控制台、文件） 安装 二进制发布版 从 Releases 页面 下载预编译的二进制文件。 从源码构建 1. 确保已安装 Go 1.20+ 2. 克隆仓库： git clone https://github.com/yourusername/nextjs-scanner.git cd...
jenkins_scan
jenkinsscan 查找 Jenkins 环境并检查 CVE-2024-23897 工作原理 Jenkins 检测 测试路径：/、/login、/oops、/api/json、/cli、/jenkins/、/jenkins/api/json 通过以下方式识别： 1. Header X-Jenkins — 最可靠，同时返回版本 2. Header X-Hudson — 旧版本实例 3. HTML 正文 — 类似 "login to jenkins"、"hudson.model" 等字符串 4. /api/json — 通过 JSON 结构（class、jobs、views）确认...
CVE-2026-45798
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, comparewazuhversions in src/shared/versionop.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy but does not explicitly...
Exploit for Use After Free in Redis
redis-cve-2026-23479-check A safe, read-only version chec...
Lightning Flow Scanner Vulnerable to Code Injection via Unsafe Use of `new Function()` in APIVersion Rule
Impact The APIVersion rule uses new Function to evaluate expression strings. A malicious crafted flow metadata file can cause arbitrary JavaScript execution during scanning. An attacker could execute arbitrary JavaScript during a scan by supplying a malicious expression within rule configuration ...
Exploit for CVE-2025-29927
Next.js Vulnerability Scanner CVE-2025-29927 !Go Report C...
GHSA-5HFM-G799-WJW6 Cross site scripting in Elefant CMS
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...
Cross site scripting in Elefant CMS
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...
CVE-2017-20058
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...
CVE-2017-20058 Elefant CMS Version Comparison Persistent cross site scriting
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...
CVE-2017-20058 Elefant CMS Version Comparison Persistent cross site scriting
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...
CVE-2017-20058: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...
AuraBorealisApp - Do You Know What's In Your Python Packages? A Tool For Visualizing Python Package Registry Security Audit Data
AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis designed for large scale security auditing of Python packages. The...
How to Upgrade Receiver from StoreFront
Question: How to upgrade Receiver from StoreFront? Answer: 1. Go to C:\Program Files\Citrix\Receiver StoreFront\Receiver Clients\. Create a Windows folder if it doesn’t exist. 2. In the Windows folder, paste the Receiver for Windows with the version you want to set as the threshold, overwriting...
Enterprise security vulnerability notification engine-vulnerability warning-the black bar safety net
Today most enterprises are in vulnerability scanning+vulnerability announcements, there are the following two questions: 1. The drain sweep the presence of the“scan cycle is long, the scan database not updating”, etc., while the scanning report whether the number of interference terms, leading to...
Microsoft Patches FASTFIX on Older Versions of Windows
UPDATE – Microsoft this week patched a vulnerability in the FASTFAT driver that interacts with FAT32 disk partitions, closing a privilege escalation and code execution hole in Windows Server 2003, Windows Vista and Windows Server 2008. But what about Windows 7 and up versions of the OS, you may b...
DEBIAN-CVE-2014-0479
reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compareversions and reportbug/checkversions.py...
