33 matches found
cve-2024-41110-checker
CVE-2024-41110 Docker Security Checker This tool is designed to check multiple hosts for vulnerabilities related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable Docker versions and the use of AuthZ plugins, which can potentially lead to security issues. Features...
CVE-2023-25157
CVE-2023-25157 This is a simple Python Script to Find the Latest GeoServer SQL Injection Vulnerability. You can use the Scripts on hosts to check for infected path. Installation: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh Note: You...
CVE-2022-24086-RCE
CVE-2022-24086-RCE CVE-2022-24086 Exploitation tool written in Python 3 compatible with lists of URL/IPs. This download includes a list of over 334,300 potentially vulnerable hosts according to shodan.io and personal scans. This tool is NOT free to prevent abuse. As of now patches are being appli...
Logsensor
Logsensor A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Proxy compatibility http, https Login panel scanning are done in multiprocessing so the script is super fast at scanning many urls quick tutorial & screenshots a...
ScannerCVE-2021-3156
ScannerCVE-2021-3156 Script to scan a list of hosts to check if they are vulnerable to CVE-2021-3156. If not vulnerable, the output is as follows: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudoedit: a...
sonar.js
sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....
laf
laf A python script that scans for admin/login panels on a given host or list of hosts. usage: laf.py -h -d host -l hostfile|- -sys system -c cookie -u user -da -p pass -ic -k -v Find admin/login panel for a single host -d or a list of hosts -l. optional arguments: -h, --help show this help messa...
meg
meg meg es una herramienta para obtener muchas URLs pero siendo 'amable' con los servidores. Se puede usar para obtener muchas rutas de muchos hosts; obteniendo una ruta para todos los hosts antes de pasar a la siguiente ruta y repetir. Obtienes muchos resultados rápidamente, pero ninguno de los...
webanalyze
webanalyze Esta es una adaptación de Wappalyzer en Go. Esta herramienta está diseñada para ser eficiente y permite probar listas enormes de hosts. !NOTE Debido a que Wappalyzer eliminó el acceso público a sus definiciones de aplicaciones, webanalyze actualmente carga las definiciones desde enthec...
mec
mec MassExploitConsole Destinado a la explotación masiva Sigue lawiki para comenzar Características Interfaz CLI fácil de usar Ejecuta exploits adaptados con concurrencia a nivel de procesos Exploits integrados automatizados Oculta tu IP usando proxychains4 y proxypool Escaneo de hosts ZoomEye 10...
log4j-cve-2021-44228
Playbook dello scanner detector Log4j-CVE-2021-44228 Playbook Ansible per verificare gli host Linux di destinazione utilizzando lo script detector ufficiale Red Hat Log4j per Log4Shell CVE-2021-44228. Detector Red Hat versione 1.3 del 2022-01-10. Il risultato viene salvato in un file txt in...
webanalyze v0.4.6
webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...
CVE-2026-88892
OpenPanel , an analytics platform, has a server-side request forgery (SSRF) vulnerability in its data importer. The parseRemoteFile function in packages/importer/src/providers/umami.ts calls plain fetch() on a caller-supplied fileUrl validated only by z.string().url(), bypassing the project's exi...
CVE-2026-88892 OpenPanel through 2.3.0 SSRF via Unguarded Importer File URL Fetch
In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts, parseRemoteFile calls fetch on config.fileUrl, which is validated only by...
EUVD-2026-75442
OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...
PT-2026-89403
OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...
CVE-2026-76361
Splunk SOAR versions below 8.6.0 are affected by an SSRF vulnerability in the /rest/support/connectivity/.../check_connectivity REST API endpoint, which fails to validate destination hosts before initiating outbound connections, allowing an Administrator-role user to probe internal network reacha...
PT-2026-78788
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Administrator role can perform Server-Side Request Forgery SSRF—a technique where an attacker forces a server to make requests to an unintended location—via the...
