9495 matches found
CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner
Scan multithreadé Python2 de la vulnérabilité de lecture de fichier du protocole Tomcat-Ajp Avantage pour ceux qui chassent les points SRC Le POC provient de https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, l'auteur du POC n'est pas moi !!!! Opérations 1. Mettez les domaines/IP à scanne...
WebLogic_CNVD_C_2019_48814
WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scanné par 7kbstorm...
TomcatScanPro
TomcatScanPro root@kitploit: Si vous pensez que ce projet vous est utile, n'oubliez pas de lui attribuer une étoile ⭐ ! Votre soutien est notre motivation pour continuer à optimiser et améliorer ce projet ! 😊 Introduction Ce projet est un outil de détection des mots de passe faibles pour les...
CNVD-2020-10487-Bulk-verification
Скрипт массовой проверки CNVD-2020-10487 CVE-2020-1938 Пакетный скрипт на основе POC-файла от @YDHCUI. Позволяет выполнять массовую проверку и автоматически делать скриншоты для удобной перепроверки. 1. Подготовка окружения Виртуальное окружение устанавливайте через conda инструкцию по установке...
ECShop 4.1.0 - SQL Injection
ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. id: CVE-2021-41460 info: name: ECShop 4.1.0 - SQL Injection author: SleepingBag945 severity: high description: | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited ...
Serein
Serein | Dans le crépuscule pluvieux | Ce projet a suspendu ses mises à jour La version anglaise Linux est en ligne ! | Linux英文版版本上线！ http://github.com/W01fh4cker/SereinLinux Déclaration | 声明 Ce projet est destiné à une utilisation sous autorisation uniquement. Il est interdit d'utiliser ce proje...
WebLogic_CNVD_C2019_48814
7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan par 7kbstorm...
LiteLLM SQL injection vulnerability
LiteLLM is an open-source application developed by Berri AI. It allows for the invocation of all LLM APIs in the OpenAI format. LiteLLM has a SQL injection vulnerability, and attackers can exploit this vulnerability to obtain sensitive database information...
N-able N-central authorization issue vulnerability
N-able N-central is a remote monitoring and management system developed by the Canadian company N-able. Versions of N-able N-central prior to 2026.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to bypass authentication processes...
IBM Langflow OSS path traversal vulnerability
IBM Langflow OSS is an open-source low-code visual AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to integrate wit...
IBM Langflow OSS authorization issue vulnerability (CNVD-2026-31200)
IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...
IBM Langflow OSS code injection vulnerability
IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...
IBM App Connect Enterprise information leakage vulnerability (CNVD-2026-31544)
IBM App Connect Enterprise is an enterprise-level application connection platform used for system integration. It supports connections and conversions between applications, data, and APIs. There is an information leakage vulnerability in IBM App Connect Enterprise. This vulnerability stems from t...
Adobe Campaign Classic SQL Injection Vulnerability
Adobe Campaign Classic is a marketing activity management platform developed by the American company Adobe. Adobe Campaign Classic has a SQL injection vulnerability, which stems from improper handling of special elements in SQL commands. Attackers can exploit this vulnerability to gain access to...
IBM App Connect Enterprise path traversal vulnerability (CNVD-2026-31543)
IBM App Connect Enterprise is an enterprise-level integration platform, primarily used for connecting different applications, data, and APIs to build integrated processes. IBM App Connect Enterprise has a path traversal vulnerability. This vulnerability stems from the failure to properly validate...
Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30702)
Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a buffer overflow vulnerability in Apache Traffic Server, which stems from out-of-bounds writes, path traversal, and memory error references within the Cripts...
Apache Traffic Server resource management error vulnerability (CNVD-2026-30704)
Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from use-after-free and check-time/usage time errors during remap configuration processing...
Adobe Bridge out-of-bounds write vulnerability (CNVD-2026-30874)
Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...
Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30698)
Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from improper handling of input by the urisigning and urlsig plugins. Attackers can exploit this...