Log4j-Windows-Scanner

Log4j-Windows-Scanner CVE-2021-44228 Apache Log4j 库漏洞 | Windows 机器上的 Log4j 漏洞扫描器。 工作原理 它通过遍历 C 盘目录下的文件夹，检测存在漏洞的 log4j 版本。 当发现存在漏洞的文件时，它会输出 ".TXT" 文件。无法扫描文件 "log.txt"。 换句话说，它会列出因权限不足而无法读取内容的目录。 请留意这些文件夹。确保以管理员权限运行。 下一步，它会在存在漏洞的版本中搜索 "JndiLookup.class" 文件。 使用方法 on any command screen Log4j.exe 建议...

goLoL

goLoL goLoL 是一款 Windows 主机扫描工具，同时支持 LOLBAS 可执行文件和 LOLDrivers 。它列出当前权限等级下可运行的 LOLBAS 技术（附带 MITRE ATT&CK 映射），并可扫描本地 .sys 文件，查找与易受攻击/恶意的 LOLDrivers 哈希匹配项。 注意： 这并不是一个 OPSEC 安全的工具。 作者： Aaron Kidwell █████ █████ ░░███ ░░███ ███████ ██████ ░███ ██████ ░███ ███░░███ ███░░███ ░███ ███░░███ ░███ ░███...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 漏洞扫描器，适用于 Windows 操作系统。 使用示例 用法 .\log4j-scanner.exe 终端用于输出结果，通过 RMM 将该工具部署到机器上，并通过 PowerShell 或 CMD 提示符启动/报告。 从源代码构建 git clone https://github.com/name/log4j-scanner.git cd log4j-scanner/ go get github.com/shirou/gopsutil/disk go build . 工作原理？...

Xmlrpc-scanner

QMLRPC Vulnerability Scanner 🚀 Windows-compatible advanced QM...

CVE-2025-59457: Permissive List of Allowed Inputs

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

CVE-2025-54531: Relative Path Traversal

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

Adobe InDesign < 12.0.0 (APSB16-43)

The version of Adobe InDesign installed on the remote Windows host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...

Adobe Premiere Pro < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-58)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-58 advisory. - Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability th...

Apple iTunes < 12.12.9 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213763 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be...

Adobe InDesign < 18.5.3 / 19.0 < 19.4.0 Multiple Vulnerabilities (APSB24-48)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.3, 19.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-48 advisory. - InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow...

Adobe ColdFusion < 2018.x < 2018u19 / 2021.x < 2021u9 / 2023.x < 2023u3 Multiple Vulnerabilities (APSB23-47)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 19, 2021.x update 9, or 2023.x update 3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-47 advisory. - Deserialization of Untrusted Data CWE-502 potentially leading t...

Citrix Storefront Installed (Windows)

Binary data citrixstorefrontwininstalled.nbin...

Adobe Photoshop 22.x < 22.5.8 / 23.x < 23.4.1 Multiple Vulnerabilities (APSB22-35)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.8/23.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-35 advisory. - Adobe Photoshop versions 22.5.7 and earlier and 23.3.2 and earlier are affected by a Use After Free...

Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities, as follows: - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary...

Oracle Java SE 1.7.0_291 / 1.8.0_281 / 1.11.0_10 / 1.15.0_2 Information Disclosure (Windows Jan 2021 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 291, 8 Update 281, 11 Update 10, or 15 Update 2. It is, therefore, affected by an information disclosure vulnerability as referenced in the January 2021 CPU advisory. Specifically, an...

QEMU Installed

Binary data qemuinstalledwindows.nbin...

New malware mimics Windows scanner to infect PCs with ransomware

By Sudais This trojan horse was discovered which pretends to be a Windows scanner by Microsoft but in reality, it is everything evil but so. This is a post from HackRead.com Read the original post: New malware mimics Windows scanner to infect PCs with ransomware...

Symantec Endpoint Protection Client 12.1.x < 12.1.6 MP6 Multiple DoS (SYM16-015)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is 12.1.x prior to 12.1.6 MP6 or else 12.1.6 MP5 without a hotfix. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the decomposer...

Microsoft Windows Current Sessions

Binary data microsoftwindowscurrentsessions.nbin...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...