F5 iControl REST - Remote Command Execution

F5 iControl REST interface is susceptible to remote command execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. This affects BIG-IP 16.0.x before 16.0.1.1, 15.1.x before...

cve-2024-38063-detection-mitigation-system

CVE Vulnerability Detection and Mitigation System Author: Rohit Malik | Domain: Cybersecurity | Type: Group Academic Project | Purpose: Portfolio & Educational Overview This project is a group-based cybersecurity implementation focused on detecting and mitigating a real-world critical vulnerabili...

PT-2026-104451

Name of the Vulnerable Software and Affected Versions Zilliz Attu versions prior to 3.0.0 Description The Playground feature allows Server-Side Request Forgery SSRF, a condition where the server can be coerced into making requests to private IP addresses, effectively acting as a proxy...

CVE-2026-94483: Server-Side Request Forgery (SSRF)

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

Linux Distros Unpatched Vulnerability : CVE-2026-94483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolutio...

Uniview IP Cameras Classic Buffer Overflow (CVE-2021-45039)

Multiple models of the Uniview IP Camera offer an undocumented UDP service on port 7788 that allows a remote, unauthenticated attacker to overflow an internal buffer and achieve code execution. By using this buffer overflow, a remote attacker can start the telnetd service. This service has a...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

externalip-webhook

externalip-webhook created to address CVE-2020-8554 Note: This chart is deprecated for kubernetes version 1.21 and unsupported starting with 1.22. To mitigate CVE-2020-8554, enable the DenyServiceExternalIPs admission controller on the cluster. externalip-webhook, is a validating webhook which...

CVE-2021-37740

Proof of Concept for CVE-2021-37740 Table of Contents Introduction The Vulnerability Executing the PoC Remediation Coordinated Vulnerability Disclosure License Change Log Introduction CVE-2021-37740 is a denial of service DoS vulnerability that affects firmware v3.0.3 of the KNXnet/IP Secure rout...

CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...

reachability

-- START DISCLAIMER -- USE AT OWN RISK -- IN NO WAY AM I RESPONSIBLE FOR ANY DAMAGES INCURRED -- IF YOU DON'T HAVE EXPLICT PERMISSION BY THE NETWORK OWNER DO NOT AND I REPEAT DO NOT LAUNCH THIS THIS IS PYTHON WRAPPED AROUND MASSCAN https://github.com/robertdavidgraham/masscan -- END DISCLAIMER--...

CLSA-2026-1790890883 TuxCare security update for ip-address (3 CVEs)

TuxCare rebuilt ip-address to address 3 CVEs. Fixed in 7.1.0-tuxcare.4...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

Reverse-Ip

Reverse-Ip python 2.7 BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

cloud_ip_ranges

Cloud IP Ranges Description Most cloud providers publish up to date lists of their IP address ranges. This tools identifies if an IP belongs to a provider's ranges by fetching and parsing the latest lists. Supports: AWS source Azure source Google Cloud Platform source Alibaba Cloud currently...

Cisco-SNMP-Slap

OVERVIEW cisco-snmp-slap utilises IP address spoofing in order to bypass an ACL protecting an SNMP service on a Cisco IOS device. Typically IP spoofing has limited use during real attacks outside DoS. Any TCP service cannot complete the inital handshake. UDP packets are easier to spoof but the...

ImpossibleTravelLogAnalysis

Impossible Travel Log Analysis by NCC Group About Basic log analysis tool to detect impossible travel via IP address geographic information Expected Data Format A CSV file with the following headers When,User,Event,IP With the following format 2019-04-09...

bigip-scanner

BIG-IP Scanner Determine the running software version of a remote F5 BIG-IP management interface. Developed with ❤️ by the Bishop Fox Cosmos team. Description CVE-2022-1388, a critical vulnerability in the F5 BIG-IP management interface, allows an attacker to bypass authentication and remotely...

CVE-2026-72815-poc

CVE-2026-72815: go-chi/chi middleware.RealIP IP Spoofing PoC 日本語版 Overview This repository contains a local Proof of Concept PoC for CVE-2026-72815 GHSA-3fxj-6jh8-hvhx, an IP spoofing vulnerability in go-chi/chi's middleware.RealIP. The vulnerable middleware blindly trusts the first leftmost valu...