CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner m10sec द्वारा विकसित। यह स्क्रिप्ट किसी रिमोट सर्वर पर Nginx के संस्करण का स्वचालित रूप से पता लगाती है और मूल्यांकन करती है कि क्या यह ज्ञात सुरक्षा कमजोरियों के प्रति संवेदनशील है, विशेष रूप से: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 –...

CVE-2023-22515

CVE-2023-22515 كيف تعمل طريقة الكشف هذه؟ ينظر هذا القالب إلى نقاط النهاية التالية: - "BaseURL/dologin.action" - "BaseURL" - "BaseURL/pages" - "BaseURL/confluence" - "BaseURL/wiki" من هذه النقاط النهائية، سيقوم باستخراج الإصدار. إذا تطابق الإصدار مع أي من الإصدارات أدناه، فإنه يُعتبر ضعيفًا معرضًا...

CVE-2023-27350-POC

CVE-2023-27350-POC एक Python स्क्रिप्ट जो PaperCut MF/NG के असुरक्षित संस्करण की खोज करती है अधिक जानकारी यहाँ मिल सकती है: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software नोट: यह केवल शैक्षिक उपयोग के लिए बनाया गया है। अपने जोखिम पर उपयोग करें।...

CVE-2024-6387-Checker

CVE-2024-6387-Checker यह उपकरण आपके नेटवर्क में OpenSSH CVE-2024-6387 के असुरक्षित संस्करण चलाने वाले होस्टों को स्कैन करता है। यह एकल IP, एकाधिक IP, CIDR रेंज, और कस्टम पोर्ट वाली CSV फ़ाइलों को संभाल सकता है। आवश्यकताएँ pip का उपयोग करके आवश्यक लाइब्रेरियाँ इंस्टॉल करें: pip install paramiko...

react2shell-checker

مدقق React2Shell أداة فحص أمنية للكشف عن ثغرة React2Shell CVE-2025-55182 في تطبيقات Next.js وReact. نظرة عامة يتيح لك مدقق React2Shell فحص المواقع الإلكترونية للكشف عما إذا كانت تعمل بإصدارات ضعيفة من Next.js أو مكونات React من جانب الخادم. تستخدم الأداة تقنية المتصفح عديم الرأس headless browser...

React2Shell-CVE-2025-55182-Detector

المتطلبات الأساسية الوصول إلى الدليل الجذر للمشروع الذي يحتوي على package.json أحد بيئات التشغيل التالية، حسب النص المستخدم: Python Javascript PowerShell Bash مع تثبيت jq الاستخدام يجب تنفيذ جميع البرامج النصية من الدليل الجذر للمشروع المستهدف حيث يوجد ملف package.json. 1. الكشف باستخدام Python ق...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100950 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

The HAProxyMessageDecoder in netty's codec-haproxy module performs protocol version detection by reading the 13th byte of the inbound stream as a signed Java byte and widening it to int without masking. When an attacker sends a PROXY protocol v2 binary prefix 0D 0A 0D 0A 00 0D 0A 51 55 49 54 0A...

GHSA-Q6CQ-MHR2-JMR5 Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

The HAProxyMessageDecoder in netty's codec-haproxy module performs protocol version detection by reading the 13th byte of the inbound stream as a signed Java byte and widening it to int without masking. When an attacker sends a PROXY protocol v2 binary prefix 0D 0A 0D 0A 00 0D 0A 51 55 49 54 0A...

CVE-2026-55851 Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to but not including 4.2.16.Final, and 4.1.0.Final up to but not including 4.1.135, the HAProxyMessageDecoder in Netty's codec-haproxy module performs protocol version detection by...

CVE-2026-55851

CVE-2026-55851 affects Netty (codec-haproxy) where the HAProxyMessageDecoder reads the 13th byte as a signed value and sign-extends to int, causing a PROXY v2 prefix with 0xFF to collide with the decoder’s need-more-data sentinel. This leads to unbounded cumulation and potential memory exhaustion...

Exploit for CVE-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations...

Endian Firewall Detection Consolidation

Consolidation of Endian Firewall detections. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

Camaleon CMS 2.9.1 Automated Admin Login, Version Detection, and Profile Update Script

This is a version detection and profile updating script for Camaleon CMS. It does not exploit any issue but can be useful for security testing to see if a vulnerable version is in use...

📄 SPIP CMS Analysis Scanner Script

This is an exploitation tool designed for websites running the SPIP CMS versions 5.4.0 through 5.11.0. The tool performs automated detection and enumeration of SPIP installations, identifies installed plugins, attempts to determine plugin versions, and searches for forms using the saisies plugin...

Exploit for CVE-2026-27944

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector ht...

📄 Splunk Enterprise 9.1.5 / 9.2.2 Vulnerability Scanner

This PHP script is a defensive vulnerability checker for CVE-2024-36985 affecting Splunk Enterprise. It authenticates to a Splunk instance using provided credentials, retrieves the installed Splunk version, and determines whether it falls within the vulnerable ranges. The script then enumerates...

Exploit for Missing Authorization in Themepunch Slider_Revolution

CVE-2024-34444 - Slider Revolution Missing Authorization Scann...

📄 WordPress Wux Blog Editor 3.0.0 Vulnerability Scanner

This Metasploit auxiliary module scans WordPress sites for the External Post Editor plugin and checks for the unauthenticated file upload vulnerability that exists in version 3.0.0...