CVE-2023-4596-OpenSSH-Multi-Checker

CVE-2024-6387-OpenSSH-Multi-Checker The CVE-2024-6387-checker.sh script is a tool designed to check multiple targets IPs or hostnames at once for the CVE-2024-6387 vulnerability. This script performs a local OpenSSH version check, scans remote servers for SSH banners, and determines whether they...

pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

mzap

mzap mzap est un CLI Crystal pour le scan multi-cibles ZAP. Il distribue les cibles sur un ou plusieurs hôtes ZAP API, supporte un mode d'attente optionnel et peut exporter des rapports. Fonctionnalités Commandes de scan : spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan Import de...

JQShell

JQShell A weaponized version of CVE-2018-9206. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use this software for illegal purposes. This software is intended for educational use only. No...

cve2025-20265

cve2025-20265 Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker. Cisco FMC CVE-2025-20265 Vulnerability Checker Safe What it does: Uses...

AutoDirbuster

/ | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Exécuter et sauvegarder automatiquement les scans ffuf pour plusieurs adresses IP Table des matières Exécution rapide FAQ Pourquoi ? Quelle est l'utilisation...

CVE-2005-1794Scanner

CVE-2005-1794Scanner Can be used to scan several targets vulnerable to CVE-2005-1794. Credit to @daveysec and his orginal script available at https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/python/CVE-2005-1794-check.py Disclaimer I take not responsibility for your use of...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 Usage • This exploit can only be run for multi targets python3 exploit.py --file urls.txt References https://github.com/hakivvi/CVE-2022-29464...

log4j-fuzzer

log4j-fuzzer For Single Target chmod +x log4j After That Command Simply Put Your Target ./log4j YOURTARGETURL YOURREMOTESERVER For Multiple Target Gether All Domain, Subdomain, Directroty in a list After That Simply Command This chmod +x log4j You Can Create a remote server With...

CVE-2025-5349-Scanner

CVE-2025-5349 Vulnerability Scanner Usage python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...

mzap v2.2.1

mzap mzap is a Crystal CLI for multi-target ZAP scanning. It dispatches targets across one or more ZAP API hosts, supports optional wait mode, and can export reports. Features Scan commands: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API definition import for openapi, soap, graphql,...

Inadequate Encryption Strength

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

PYSEC-2026-3765

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889

The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...

CVE-2026-74889: Inadequate Encryption Strength

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

PT-2026-76625

openssl encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...