ExchangeFinder

ExchangeFinder ExchangeFinder è uno strumento semplice e open-source che tenta di trovare istanze di Microsoft Exchange per un dato dominio, basandosi sui nomi DNS comuni più utilizzati per Microsoft Exchange. ExchangeFinder può identificare la versione esatta di Microsoft Exchange a partire da...

CMSsc4n

CMSsc4n Tool zur Identifizierung, ob eine Domain ein CMS hat und zur Bestimmung seiner Version. Derzeit werden von CMSsc4n die CMS WordPress, Moodle, Joomla, Drupal und Prestashop unterstützt. Installation Sie können die neueste Version von CMSsc4n herunterladen, indem Sie das GitHub-Repository...

wp2shell-detect

wp2shell-detect Blackbox, rilevatore non intrusivo per wp2shell — la catena RCE pre-autenticazione nel core di WordPress divulgata il 2026-07-17: CVE-2026-63030 — confusione di route nell'endpoint REST batch /wp-json/batch/v1: una sub-request il cui percorso fa fallire wpparseurl finisce nell'arr...

exchange-scanner

Scanner do Microsoft Exchange Server Descrição Esta ferramenta verifica vários serviços comuns expostos publicamente num host alvo, a fim de detetar o Microsoft Exchange Server e, se possível, identificar a versão do seu software através de impressão digital. Para tal, utiliza as seguintes...

litellm-sqli-scanner

LiteLLM SQL Injection Scanner CVE-2026-42208 — SQL injection nel LiteLLM Proxy Rileva e convalida CVE-2026-42208: vulnerabilità di SQL injection nel livello del database di LiteLLM Proxy. Solo per test di sicurezza autorizzati. Funzionalità Rilevamento di SQL injection CVE-2026-42208 Fingerprinti...

Exploit for CVE-2026-64638

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concep...

Exploit for CVE-2026-64638

🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638...

Exploit for CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...

CVE-2026-40908

WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file git.json.php at the web root executes git log -1 and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash enabling version fingerprinting against known CVEs,...

PrestaShop Version Hunter

psversionhunter.py fingerprints a PrestaShop installation by comparing the versions of its native modules against the module versions bundled with a known PrestaShop release tag. This is useful when a target does not expose the PrestaShop core version directly but still exposes native module...

WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php Exposes Developer Emails and Deployed Version

Summary The file git.json.php at the web root executes git log -1 and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash enabling version fingerprinting against known CVEs, developer names and email addresses PII, and commit messages which may...

CVE-2022-23690

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further...

EUVD-2025-36362

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header, enabling attackers to fingerprint the server and assess potential exploits. This information disclosure vulnerability originates from PHP’s...

EUVD-2022-28629

Malicious code in bioql PyPI...

CVE-2019-10667

An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths...

Security feature bypass

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further...

JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting

Security Advisory: JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting Date: 14/06/05 URL: http://www.illegalaccess.org/java/jbosspath.php Problem: The default installation of JBoss reveals the path of the installation directory and allows...