114 matches found
masscan
MASSCAN: Массовый IP-сканер портов Это сканер портов масштаба Интернета. Он может просканировать весь Интернет менее чем за 5 минут, передавая 10 миллионов пакетов в секунду с одной машины. Его использование параметры, вывод похоже на nmap, самый известный сканер портов. Если сомневаетесь,...
CVE-2019-0708-POC
CVE-2019-0708-POC 사용 설명 IP 형식: IP:포트, ip.txt에 저장 cve-2019-0708.py 100线程...
CVE-2018-9995-2
도구 CVE-2018-9995-2 CVE: CVE-2018-9995 익스플로잇 작성자: Fernandez Ezequiel @capitanalfa 수정: Kien Quoc 버전: 2.0 Python3 설치 apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 빠른 시작 git clone https://github.com/kienquoc102/CVE-2018-9995-2 cd CVE-2018-9995...
CVE-2021-41773-exploit
사용법 파일 ip-ports.txt: 1.1.1.1:80 node CVE-2021-41773.js ip-ports.txt...
CVE-2026-24061
CVE-2026-24061 python3 exploit.py...
CVE-2026-27472-and-CVE-2026-27474
CVE-2026-27472 및 CVE-2026-27474 CVSS-B 5.3 MEDIUM 및 CVSS-B 4.8 MEDIUM SPIP 4.4.8 신디케이션 기능의 Blind SSRF 및 저장형 XSS 설명과 추가 정보는 제 웹사이트에서 확인하세요 PoC 1. 관리자로 로그인합니다. 2. 사이트 콘텐츠 구성에서 사이트 참조 및 신디케이션이 웹사이트 디렉토리 관리로 설정되어 있는지 확인합니다. 3. 섹션으로 이동하여 사이트 참조를 클릭합니다. 4. 신디케이션 필드에서 신디케이션을 클릭하고 대상 IP와 포트를 입력합니다:...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: Added an seqadj extension for natted connections. Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. This is due to the need to rewrite the packet payload IP, port on the ftp control...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-67874
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is susceptible to an incorrect access control vulnerability in the getIpPortFilterRules function. This flaw allows unauthenticated attackers to obtain sensitive IP and port filtering rules by sending a crafted POST request t...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...
CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...
TencentOS Server 4: nginx (TSSA-2025:0724)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0724 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
The vulnerability of the portValidate method in the IpOrPortController class of the IT infrastructure and cybersecurity management system Sangfor Operation and Maintenance Security Management System (OSM) allows a attacker to execute arbitrary commands.
The vulnerability of the portValidate method in the IpOrPortController class of the IT infrastructure and cybersecurity management system, Sangfor Operation and Maintenance Security Management System OSM, is related to the failure to take measures to neutralize special elements during the...
BIT-NGINX-GATEWAY-2025-23419 TLS Session Resumption Vulnerability
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...