CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

CVE-2023-22518

CVE-2023-22518 Checker for CVE-2023-22518 and CVE-2023-22515 critical vulnerabilities in Confluence. Description This script is designed to check for and exploit vulnerabilities in Atlassian Confluence instances. It checks for the vulnerability CVE-2023-22518, and exploits the vulnerability...

CVE-2020-5902-F5BigIP

CVE-2020-5902 F5 BIG-IP devices Summary: A Zeek detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks BIG-IP devices. References: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

blmvuln

PrestaShopウェブサイトの重大なセキュリティ脆弱性を修正 :rocket: CVE-2022-31101 検出兼修正ツール！ 新たに発見された脆弱性により、リモート攻撃者があなたのショップを乗っ取る可能性があります 脆弱性の詳細はこちらでお読みください： https://build.prestashop.com/news/major-security-vulnerability-on-prestashop-websites/...

CVE-2025-49113

CVE-2025-49113 検出 注記 このテンプレートは、CERT Polska のツール Artemis に実装されました。この脆弱性検出スクリプトについて CERT Polska に認められたことを深く光栄に思います。オープンソースへの貢献を通じて、世界的なサイバーセキュリティの取り組み強化に一役買えることは、本当に名誉なことです。 https://github.com/CERT-Polska/Artemis/pull/1762 この検出方法はどのように機能しますか？ このテンプレートは、HTML ボディ内の rcversion...

cve-2023-38408

CVE-2023-38408: Understanding and Simulating a Real-World SSH-Agent Vulnerability Table of Contents 1. Introduction 2. Background Concepts 3. The CVE-2023-38408 Vulnerability 4. Practical Simulation and Testing 5. Technical Analysis 6. Fix and Mitigation 7. Conclusion 1. Introduction Purpose of...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

CVE-2023-22515-NSE

CVE-2023-22515-NSE このリポジトリは、Nmap スクリプトエンジン（NSE）を使用して、Atlassian Confluence Server における CVE-2023-22515 の脆弱性の有無をチェックするツールを提供します。 CVE-2023-22515 の概要 CVE-2023-22515 は、Atlassian Confluence Server における重大な脆弱性であり、攻撃者に以下のことを可能にします： 1...

CVE-2023-38408

CVE-2023-38408 针对影响 OpenSSH 9.3p2 版本的最新关键漏洞的 PoC 旨在与涵盖此漏洞的 TryHackMe 免费访问实验室环境无缝配合。 https://tryhackme.com/room/cve202338408 注意：这在 THM 实验室环境之外 无法正常工作。 https://github.com/kali-mx/CVE-2023-38498/assets/76034874/21382c5b-9468-494d-93c7-ff2b996a4be5...

CVE-2023-1698

wagoexploit.py - PoC Exploit for CVE-2023-1698 🚀 About wagoexploit.py is a proof-of-concept PoC exploit for CVE-2023-1698 , a critical vulnerability affecting WAGO PLCs. This exploit grants the attacker shell access to the device, potentially exposing sensitive operations. ⚠️ Disclaimer: This...

Mikrotik-router-hack

WinboxExploit これは、重大なWinBox脆弱性CVE-2018-14847の概念実証であり、平文パスワードの任意ファイル読み取りを可能にします。 この脆弱性はとっくに修正されているため、このプロジェクトは終了し、今後サポートや更新は行われません。代わりにフォークして自分で更新してください。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインで単純な引数を使用して簡単に使えます。 WinBox TCP/IP...

CVE-2024-3094-One-Liner

CVE-2024-3094 한 줄 취약점 점검 도구 이 저장소는 서버가 CVE-2024-3094에 취약한지 빠르게 확인할 수 있도록 설계된 간단하면서도 강력한 한 줄 스크립트를 제공합니다. CVE-2024-3094는 특정 버전의 xz 유틸리티에서 발견된 중요한 보안 취약점입니다. 또한, 잠재적인 간접 취약점을 나타낼 수 있는 xz 라이브러리에 대한 참조를 코드 저장소에서 스캔하는 편리한 방법도 제공합니다. 서버 취약점 확인 서버가 CVE-2024-3094에 취약한지 확인하려면 터미널에서 다음 명령을 실행하세요...

dns_client_fuzzing

Microsoft Windows DNS 클라이언트 퍼징 CVE-2026-41096의 중요 취약점이 발견된 후, 저는 이 문제에 도전하기로 결정했습니다...

Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...

kkFileView 4.0 - Server-Side Request Forgery

kkFileView 4.0 contains a server-side request forgery caused by improper validation in OnlinePreviewController.java, letting attackers induce the server to make arbitrary requests, exploit requires sending crafted requests. id: CVE-2022-42149 info: name: kkFileView 4.0 - Server-Side Request Forge...

ThinVNC - Authentication Bypass

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution. id: CVE-2022-25226 info: name: ThinVNC - Authentication Bypass author: ritikchaddha severity: critical description: |...

DataEase v2.10.2 - JWT Signature Verification Bypass

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions, the lack of signature verification of JWT tokens allows attackers to forge JWTs, which then allow access to any interface. The...

TotoLink Router setMacFilterRules - Command Injection

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. id: CVE-2024-24328 info: name: TotoLink Router setMacFilterRules - Command Injection author: pussycat0x severity: critical description: |...

UserPro <= 5.1.1 - Authentication Bypass

The UserPro plugin for WordPress through 5.1.1 allows authentication bypass via the userprofbconnect AJAX action. id: CVE-2023-2437 info: name: UserPro = 5.1.1 - Authentication Bypass author: intelligent-ears severity: critical description: | The UserPro plugin for WordPress through 5.1.1 allows...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...