timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...

VHostScan

VHostScan ピボットツールと併用可能なバーチャルホストスキャナーで、キャッチオールシナリオ、エイリアス、動的デフォルトページを検出します。2017年9月のSecTalks BNEで初めて発表されました（スライドデッキ）。 これは、Codingo によるオリジナルのVHostScanの拡張版であり、追加の改善、最新のコードベース、およびバーチャルホストの発見を向上させるための拡張されたワードリストを備えています。 この拡張版の新機能 最新化されたコードベース ：Python 3.8+ に更新され、型ヒントとモダンなプラクティスを採用 拡張ワードリスト...

webcvescanner

shitsniffer 收集一个国家/州对中的Citrix设备列表，并检查它们是否容易受到CVE-2019-19781的攻击。结果以JSON格式输出，可以很好地整理到有意义的PowerBI报告中。 它通过查询Shodan来获取特定国家中与搜索字符串匹配的所有结果。默认情况下，它使用搜索字符串"Set-Cookie: pwcount=0"搜索country:AU hasssl:true。 为了检查漏洞，我们查看HEAD请求https:///vpn/%2E%2E/vpns/cfg/smb.conf是否返回状态200。这意味着允许目录遍历，并且尚未对主机应用补丁或解决方法。 设置...

Exploit for CVE-2026-41940

SessionScribe - CVE-2026-41940 Detection, mitigation, and rev...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-32415)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32415 advisory. - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scann...

Linux Distros Unpatched Vulnerability : CVE-2016-0597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before...

GitLab 12.10 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39933)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A...

CVE-2022-33230: Buffer Copy without Checking Size of Input

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host...

Security Updates for Microsoft .NET Framework (May 2020)

The Microsoft .NET Framework installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited th...

CVE-2019-12425: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

CVE-2018-1343: Improper Authentication

PAM exposure enabling unauthenticated access to remote host...

VHostScan - Virtual Host Scanner

A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 slidedeck. Key Benefits Quickly highlight unique content in catch-all scenarios Locate the outliers in catch-all scenarios whe...

HTTP Virtual Host Scanner: VHostScan

A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 Key Benefits Quickly highlight unique content in catch-all scenarios Locate the outliers in catch-all scenarios where results...

gCards < 1.46 Multiple Vulnerabilities

The remote host is running gCards, a free electronic greeting card system written in PHP. The installed version of gCards fails to sanitize user input to the 'setLang' parameter in the 'inc/setLang.php' script which is called by 'index.php'. An unauthenticated attacker may be able to exploit this...