2332 matches found
CVE-2022-41082-POC
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...
log4shell-hotfix-side-effect
Log4Shell Hotfix Side Effect Test Case I wanted to know if any ClassNotFoundException or similar unexpected exception is raised when one applies the CVE-2021-44228 aka Log4Shell hotfix as recommended here. Result: It looks like no exception is bubbling up. To test this execute the following...
kentico-xperience13-AuthBypass-wt-2025-0006
WT-2025-0006 CVE not assigned yet Kentico Xperience 13 CMS - Staging Service Authentication Bypass Check Detection in Action python3 watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0006.py -H http://labcms / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // ||...
kentico-xperience13-AuthBypass-wt-2025-0011
WT-2025-0011 CVE not assigned yet Kentico Xperience 13 CMS - Staging Service Authentication Bypass Check Detection in Action python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | |...
OWASSRF-CVE-2022-41082-POC
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...
CVE-2025-45407
CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...
CVE-2020-0601
CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...
CVE-2020-1472
CVE-2020-1472 CVE 2020-1472 Validation script Assumption: WinRM is enabled between domain controllers. Required permissions: If child domains are present: Enterprise admin If single forest, single domain: Domain admin This script must be run on a primary domain controller with required permission...
SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...
Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass
IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...
Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)
Before Kentico Xperience 13 Hotfix 173, this vulnerability can be exploited with any username provided. For Hotfix = 173 and = 173 and 178, this vulnerability can be exploited only if you provide a valid Staging Service username default: admin impact: | Unauthenticated attackers can bypass...
FortiClient EMS - Authentication Bypass
Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior. id:...
CVE-2010-3971-hotpatch
CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...
CVE-2025-37164
CVE-2025-37164 A remote code execution issue exists in HPE OneView. How does this detection method work? This template matches on the OneView title tag, extracts the version from the JavaScript artifactVersion variable, and flags instances running versions below 11.00 as potentially vulnerable...
cve_2026_frag_family_fix
ПО для устранения уязвимостей frag family / Mitigation tool for frag family vulnerability Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Запустить исправление на любом Linux / Run any Linux hotfix b="/tmp/cve2026fragfamilyfix"; wget -qO $b $wget -qO-...
cve-2018-12895-hotfix
This repository does not have a README...
xerces-3.2.3-DTD-hotfix
This repository does not have a README...
Fedora 45 : dokuwiki (2026-2ec7f70c76)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ec7f70c76 advisory. Update to version 2026-07-14c security hotfix update - see https://github.com/dokuwiki/dokuwiki/issues/4752 Tenable has extracted the preceding description...
SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...
