nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations running NGINX Open Source , NGINX Plus , or NGINX-based ingress/controllers should verify whether they are affected by CVE-2026-42945 and patch or reconfigure before exploitation attempts hit production edges. This repository provides a...

CVE-2021-1675-PrintNightmare-Analysis

Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

adfly

adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...

zerologon

zerologon Check for events that indicate non compatible devices - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 In August Microsoft patched CVE-2020-1472. With that patch theres a waiting period until 9th of february 2021 where unsecure connections will be accepte...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...

zerologon

zerologon zerologon script to exploit CVE-2020-1472 CVSS 10/10 Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. https://github.com/risksense/zerologon To exploit,...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

FineCMS <=5.0.10 - Cross-Site Scripting

FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request. id: CVE-2017-11629 info: name: FineCMS =5.0.11 which includes a fix for this vulnerability. reference: -...

Set-ZerologonMitigation

Set-ZerologonMitigation Protect your domain controllers against Zerologon CVE-2020-1472. Usage After installing the August 2020 security update or a later cumulative version, just run the script on each of your domain controllers. .\Set-ZerologonMitigation.ps1 For help, run Get-Help: Get-Help...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

APOLOGEE

🌀 APOLOGEE - Siemens Field Panel Scanner: APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers all versions prior to V3.5 and TALON TC BACnet Automation Controllers all versions prior to V3.5. With a 7.5 CVSS, thi...

Siemens APOGEE Controllers Integer Underflow (CVE-2026-102073)

The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition. This plugin only works with Tenable.ot. Please visit...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102074)

The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...

Siemens Desigo PXC/PXM Controllers Out-of-bounds Read (CVE-2026-89208)

The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries. This plugin only works with Tenable.ot. Please visit...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102075)

The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102076)

The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2026-112035

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112033

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...