cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

elegant-bouncer

ELEGANTBOUNCER ELEGANTBOUNCER هي أداة كشف للاستغلالات المتنقلة القائمة على الملفات. إنها تتبع نهجًا مبتكرًا لتحديد التهديدات المتقدمة القائمة على الملفات، مما يلغي الحاجة إلى عينات من الهجمات الفعلية ويتفوق على الأساليب التقليدية القائمة على التعبيرات النمطية أو مؤشرات الاختراق IOCs. في الوقت...

CVE-2024-5522

EN Uno scanner di PoC exploit per la vulnerabilità CVE-2024-5522 nei siti web WordPress. Questo strumento aiuta a identificare e sfruttare la vulnerabilità scansionando un elenco di URL target e tentando un payload specifico per determinare se il sito è vulnerabile. Funzionalità Scansione...

cve-2019-2725

Esecuzione con python3 1. Metti i target nel file ip.txt, formato: 192.168.1.18:7001 2. Esegui direttamente lo script, i risultati con vulnerabilità vengono salvati nel file ok.txt...

CVE-2026-59292

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...

log4shell_sentinel

Log4Shell Sentinel - Uno scanner intelligente per CVE-2021-44228 Introduzione Sebbene siano stati rilasciati alcuni strumenti eccellenti per aiutare le organizzazioni a scansionare i propri ambienti alla ricerca di applicazioni vulnerabili alla critica vulnerabilità Log4J / CVE-2021-44228, ho...

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

PYSEC-2026-2449 Django has a Race Condition vulnerability

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...

GO-2026-5728 goshs has a file-based ACL authorization bypass in goshs state-changing routes in github.com/patrickhener/goshs

goshs has a file-based ACL authorization bypass in goshs state-changing routes in github.com/patrickhener/goshs...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the seek function of the tarfile module when processing tar archives in streaming mode. An attacker can cause the process to enter an infinite loop and exhaust system resources by providing a specially crafted archive...

Exploit for Use of Incorrectly-Resolved Name or Reference in Apache Tomcat

CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization R...

CVE-2026-46491

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to version 7.0.3, simplesamlphp-module-casserver builds file paths for the file-based CAS ticket store by directly concatenating the configured ticket directory with an attacker-controll...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

DEBIAN-CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

UBUNTU-CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-23679 libusb < 1.0.30 NULL Pointer Dereference in parse_interface()

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

Exploit for Improper Input Validation in Adobe Commerce

CVE-2025-54236 - SessionReaper Lab Ambiente Docker para demon...

libusb: libusb: Denial of Service via malformed USB configuration descriptor

A flaw was found in libusb. An attacker can provide a specially crafted Universal Serial Bus USB configuration descriptor to applications using libusb. This malformed descriptor can lead to a null pointer dereference, causing the application to crash and resulting in a denial of service. This...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the FileSystemTicketStore process. An attacker can read and unserialize files outside the intended directory, and conditionally delete files, by supplying crafted path traversal sequences in public CAS validation...