114 matches found
CVE-2018-9995-2
工具 CVE-2018-9995-2 CVE: CVE-2018-9995 利用作者: Fernandez Ezequiel @capitanalfa 修改者: Kien Quoc 版本: 2.0 安装 Python3 apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 快速开始 git clone https://github.com/kienquoc102/CVE-2018-9995-2 cd CVE-2018-9995-2...
masscan
MASSCAN: 大规模IP端口扫描器 这是一个互联网规模的端口扫描器。它可以在5分钟内扫描整个互联网，从单台机器以每秒1000万个数据包的速率进行传输。 其用法（参数、输出）与最著名的端口扫描器 nmap 类似。如有疑问，可以尝试其中的某些功能——它支持对大量机器进行广泛扫描，但不支持对单台机器进行深度扫描。 内部采用异步传输方式，类似于 scanrand、unicornscan 和 ZMap 等端口扫描器。它更加灵活，允许任意端口和地址范围。 注意：masscan 使用自己的临时 TCP/IP 协议栈 。任何超出简单端口扫描的操作都可能与本地 TCP/IP...
CVE-2026-27472-and-CVE-2026-27474
CVE-2026-27472 y CVE-2026-27474 CVSS-B 5.3 MEDIO y CVSS-B 4.8 MEDIO SSRF ciego en la función de sindicación de SPIP 4.4.8 y XSS almacenado Explicaciones y más en mi sitio web PoC 1. Inicie sesión como administrador. 2. Asegúrese de que en la configuración de Contenido del sitio, Sitios...
CVE-2019-0708-POC
CVE-2019-0708-POC 食用说明 IP格式：IP:端口，保存到ip.txt cve-2019-0708.py 100线程...
CVE-2021-41773-exploit
Uso archivo ip-ports.txt: 1.1.1.1:80 node CVE-2021-41773.js ip-ports.txt...
CVE-2026-24061
CVE-2026-24061 python3 exploit.py...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: Added an seqadj extension for natted connections. Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. This is due to the need to rewrite the packet payload IP, port on the ftp control...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-67874
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is susceptible to an incorrect access control vulnerability in the getIpPortFilterRules function. This flaw allows unauthenticated attackers to obtain sensitive IP and port filtering rules by sending a crafted POST request t...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...
CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...
TencentOS Server 4: nginx (TSSA-2025:0724)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0724 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
The vulnerability of the portValidate method in the IpOrPortController class of the IT infrastructure and cybersecurity management system Sangfor Operation and Maintenance Security Management System (OSM) allows a attacker to execute arbitrary commands.
The vulnerability of the portValidate method in the IpOrPortController class of the IT infrastructure and cybersecurity management system, Sangfor Operation and Maintenance Security Management System OSM, is related to the failure to take measures to neutralize special elements during the...
BIT-NGINX-GATEWAY-2025-23419 TLS Session Resumption Vulnerability
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...