10443 matches found
@dataform/cli (>=3.0.57, <=3.0.71), @hiracky16/dataform-osmosis (>=0.1.0, <=0.1.6) +16 more potentially affected by CVE-2026-92939 via vm2 (>=3.11.3, <=3.11.6)
vm2 NPM version =3.11.3, =3.0.57, =0.1.0, =2.32.0, =1.0.0, =1.1.0, =0.2.0, =2.32.0, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.74.12 and more Source cves: CVE-2026-92939 Source advisory: OSV:GHSA-46PR-C5WC-XFFX...
FOFA-API-Threaded-Searcher
FOFA API Threaded Searcher A powerful multiโthreaded Python tool to query the FOFA Fofa.so API, extract selected fields, and save unique results with intelligent formatting. โจ Features Multiโthreaded โ Fetch multiple pages concurrently configurable threads Custom fields โ Choose any valid FOFA...
php_filter_chains_oracle_exploit
Cadenas de filtros PHP: lectura de archivos desde un orรกculo basado en errores Una CLI para explotar parรกmetros afectados por la lectura de archivos causada por el orรกculo basado en errores de las cadenas de filtros PHP. Puede utilizarse para filtrar el contenido de un archivo local cuando se pas...
apache-camel-docling-security-assessment
CVE-2026-40047 - Apache Camel Docling CLI Argument Injection Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Apache Camel Docling argument validation risk, including technical impact, remediation, and mitigation strategy. ๐ Report Snapshot Field| Details...
unauthscout
UnauthScout UnauthScout is a CLI tool for unauthenticated OSINT reconnaissance on public developer platforms such as GitHub and GitLab. It standardizes the collection of publicly available user data using a consistent interface and normalized JSON output contracts. Problem Statement Public...
CVE-2025-21385
SSRF Exploit Script This repository contains a script designed to perform an SSRF Server-Side Request Forgery exploit for testing and educational purposes. Use this tool responsibly and only in environments where you have explicit permission. Features Exploit SSRF vulnerabilities in target system...
CVE-2025-11953-POC-
CVE-2025-11953 - React Native CLI RCE Research Environment ๐ Overview CVE-2025-11953 is a critical Remote Code Execution RCE vulnerability in the React Native CLI's Metro development server discovered by JFrog Security. This research environment provides the actual vulnerable implementation for...
CVE-2021-23639
Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...
reposherlock
RepoSherlock English | Tรผrkรงe Drop a GitHub repo URL or local path and get architecture, run guidance, risks, and actionable issues. Live CLI Preview Why RepoSherlock Before you run: understand architecture. Before you trust: see security and license risks. Before you waste time: start with...
React-Next-Scanner
React-Next-Scanner Safe CLI scanner for CVE-2025-55182 and CVE-2025-66478 This tool provides a lightweight, non-exploitative vulnerability scanner focused on modern JavaScript stacks, specifically: API services affected by CVE-2025-55182 Next.js applications affected by CVE-2025-66478 It works on...
CVE-2024-23897
Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character...
nextploiter
nextploiter Exploit tool for NextJS Usage Commands Usage $ npm install -g nextploiter $ nextploiter COMMAND running command... $ nextploiter --version nextploiter/1.0.0 darwin-arm64 node-v24.12.0 $ nextploiter --help COMMAND USAGE $ nextploiter COMMAND ... Commands nextploiter help COMMAND...
CVE-2024-23897
CVE-2024-23897 Jenkins RCE Arbitrary File Read CVE-2024-23897 Usage: python poc.py http://127.0.0.1:8888/ /etc/passwd Update: Update to Jenkins 2.442, LTS 2.426.3 Fix: If you can't update to the latest version, disable access to the CLI, this should completely eliminate the possibility of...
exploit-CVE-2014-6271
exploit-CVE-2014-6271 docker run --rm -d -p :80 vulnerables/cve-2014-6271 sh exploit-cli.sh...
CVE-2022-44877-RCE
This repository does not have a README...
CVE-2024-23897
CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controll...
CVE-2024-23897-Arbitrary-file-read
๐คต๐ป CVE-2024-23897 Arbitrary-file-read ๐คต๐ป Affected versions: Jenkins 2.441 and earlier. Jenkins LTS 2.426.2 and earlier. A Python script to automate the vulnerability CVE-2024-23897 ๐ค ๐ ๏ธ This Python code presents a scanner for a specific vulnerability CVE-2024-23897 in Jenkins servers. It starts by...
hotpot
Hotpot ๐ฒ Authy / Google Authenticator for the command line. Hotpot is a simple and secure command-line tool for managing TOTP-based two-factor authentication codes. Hotpot securely stores your 2FA secrets in your system's keyring and generates time-based one-time passwords when you need them. Bui...
cve-lite-on-pi
cve-lite-on-pi A short write-up of running CVE Lite CLI against the pi monorepo, and what it found. Background This experiment was prompted by the article "OWASP CVE Lite CLI โ New Tool to Scan for Vulnerabilities in Your Projects" CyberSecurityNews. What is CVE Lite CLI? CVE Lite CLI is a...
