pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

pyfiscan

pyfiscan 关于 Pyfiscan 是一款免费的 Web 应用漏洞与版本扫描工具，可用于定位 Linux 服务器中常见 Web 应用的过期版本。典型用例是托管服务提供商关注其用户的安装情况，以确保安全更新及时跟进。指纹识别易于创建和修改，用户可使用 YAML 语法编写。Pyfiscan 还包含一个利用模板创建电子邮件警报的工具。 要求 Python 3 Python 模块 PyYAML docopt chardet GNU/Linux Web 服务器 测试主要在 GNU/Linux Debian 稳定版上进行。目前不支持 Windows。 可检测以下软件 Abantecart...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

Escáner RSC RCE de Next.js y Colección de POC/Exploit CVE-2025-66478 Un escáner de línea de comandos para la detección por lotes de versiones de aplicaciones Next.js y determinar si están afectadas por la vulnerabilidad CVE-2025-66478. Este escáner no explota la vulnerabilidad Descripción de la...

log4j-detector

Log4j-检测器 扫描器，用于检测易受攻击的 Log4J 版本，帮助团队评估其对 CVE-2021-44228（严重）、CVE-2021-45046、CVE-2021-45105 和 CVE-2021-44832 的暴露程度。可通过仔细检查整个文件系统（包括所有已安装的应用程序）来搜索 Log4J 实例。它能够找到隐藏多层深处的 Log4J 实例。适用于 Linux、Windows 和 Mac，以及 Java 能运行的任何地方！ 目录 简介 使用示例 更多使用示例 理解结果 用法 从源码构建 测试 许可证 常见问题解答 它是如何工作的？ 此扫描仪仅报告对 log4j-core...

versionscan

versionscan Versionscan 是一个用于评估当前已安装 PHP 版本、并根据已知 CVE 及其修复版本进行比对，以报告潜在问题的工具。 请注意： 目前仍在适配那些将安全修复向后移植的 Linux 发行版。当前工具仅针对直接报告的版本进行反馈。 安装 使用 Composer root@kitploit: "require": "psecio/versionscan": "dev-master" 目前唯一的依赖是 Symfony console。 使用 若要针对当前 PHP 版本运行扫描，请使用： bin/versionscan 该脚本将检查当前实例的 PHPVERSION...

Scanner_CVE_2026-42945

Escáner para detección de instancias Nginx vulnerables al CVE-2026-42945 NGINX RIFT. Acepta IPs individuales, rangos CIDR y ASNs como entrada. Acerca de El CVE-2026-42945 afecta a todas las versiones de Nginx anteriores a la 1.30.1. La herramienta sondea HTTP y HTTPS en los puertos predeterminado...

Find-VulnerableElectronVersion

Find-VulnerableElectronVersion Escanea un ejecutable y determina si estaba empaquetado en una versión de Electron vulnerable a la vulnerabilidad de Chromium CVE-2023-4863/ CVE-2023-5129 mediante la herramienta Strings de Sysinternals. Solo compatible con dispositivos Windows. Requiere que...

CVE-2023-48795

🛡️ Escáner de Vulnerabilidad Terrapin CVE-2023-48795 Una herramienta Python para identificar servidores SSH potencialmente vulnerables a CVE-2023-48795 Terrapin mediante la extracción de banners de versión de OpenSSH a través del puerto 22 usando netcat. 📌 Descripción Este escáner comprueba si un...

Livewire2025CVE

Livewire2025CVE Scanner Livewire CVE-2025-54068 Scanner automatizado de vulnerabilidades para detectar a CVE-2025-54068 em aplicações Laravel que usam Livewire v3.0.0-beta.1 até v3.6.3. Visão Geral Esta ferramenta escaneia uma lista de sites em busca de indicadores da vulnerabilidade crítica de...

Marimo Vulnerable Version Scanner

Marimo versions prior to 0.23.0 suffer from a remote code execution vulnerability. This tool scans the version to see if your installation is susceptible but does not provide any exploitation functionality...

Google Chrome 145.0.7632.75 Cross-Platform Version Scanner

This Python script is a defensive security utility designed to detect whether the installed version of Google Chrome is vulnerable to CVE-2026-2441, a high-severity use-after-free flaw affecting versions prior to 145.0.7632.75...

Ubuntu 24.04 LTS : Python vulnerability (USN-6941-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6941-1 advisory. It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered private or globally reachable. Th...

CBL Mariner 2.0 Security Update: openslp (CVE-2019-5544)

The version of openslp installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-5544 advisory. - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the...

CentOS 8 : libssh (CESA-2024:3233)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:3233 advisory. - A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue...

Rocky Linux 8 : git-lfs (RLSA-2024:2699)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2699 advisory. - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK stat...

Rocky Linux 8 : nodejs:16 (RLSA-2024:1444)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1444 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited i...

Oracle Linux 7 : python-cryptography (ELSA-2024-19480)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-19480 advisory. 3.2.1-1.0.1 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates Orabug: 36143838 Tenable has extracted the preceding description block...

Fedora 39 : diffoscope (2024-3383326db4)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3383326db4 advisory. Small bugfix update incl. a CVE fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 39 : fonttools (2024-6d1d9f70d2)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6d1d9f70d2 advisory. Security fix for CVE-2023-45139 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...