117 matches found
CVE-2018-2628all
Script de detección por lotes de vulnerabilidad CVE-2018-2628 Instrucciones de uso Formato de IP: 192.168.31.1:443 192.168.31.100:443 Nómbralo como url.txt y guárdalo en el mismo directorio, luego ejecuta el script. ¡Comenta tú mismo los resultados de salida! Ejecuta de la siguiente manera:...
CVE-2018-2628-detect
CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: 192.168.31.1:443 192.168.31.100:443 Name it url.txt and save it in the same directory, then run the script. Please comment out the output display yourself! Run it like this: 程序在Deepin下没问题，但是到了win10下的Ubuntu就不行了，改了一下 3是超时时间，单位秒...
CVE-2018-6574-POC
CVE-2018-6574 POC LINK A simple POC for CVE-2018-6574 https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/...
PT-2026-8092
@VulmonFeeds 🚨 CVE-2025-27928 is a vulnerability associated with Link Power OA, specifically an arbitrary file upload flaw in the UpLoadFile/uploadLogo endpoint, as identified in NSFOCUS NIPS/IPS rule updates. CVE Vulnerability...
PT-2026-8093
@VulmonFeeds CVE-2025-27941 is a vulnerability addressed in the NSFOCUS NIPS Network Intrusion Prevention System IPS Rule 5.6.11 upgrade package, which updates the engine to detect and mitigate it. 🔒 CyberSecurity...
EUVD-2023-59773
Malicious code in bioql PyPI...
CVE-2023-7308: Missing Authentication for Critical Function
SecGate3600, a network firewall product developed by NSFOCUS, contains a sensitive information disclosure vulnerability in the /cgi-bin/authUser/authManageSet.cgi endpoint. The affected component fails to enforce authentication checks on POST requests to retrieve user data. An unauthenticated...
NSFOCUS SecGate3600 安全漏洞
NSFOCUS SecGate3600 is a new generation firewall security product from China Green Alliance NSFOCUS. A security vulnerability exists in NSFOCUS SecGate3600, which stems from insufficient authentication checking and may lead to sensitive information leakage...
Mirai-Inspired Gorilla Botnet Hits 0.3 Million Targets Across 100 Countries
A new Gorilla Botnet has launched massive DDoS attacks, targeting over 100 countries, according to cybersecurity firm NSFOCUS.…...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! options Arguments - url: Root URL base...
Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw
A hacking group that leveraged a recently disclosed security flaw in the WinRAR software as a zero-day has now been categorized as an entirely new advanced persistent threat APT. Cybersecurity company NSFOCUS has described DarkCasino as an "economically motivated" actor that first came to light i...
Iranian APT Group OilRig Using New Menorah Malware for Covert Operations
Sophisticated cyber actors backed by Iran known as OilRig have been linked to a spear-phishing campaign that infects victims with a new strain of malware called Menorah. "The malware was designed for cyberespionage, capable of identifying the machine, reading and uploading files from the machine,...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 - WinRAR File Extension Spoofing Vulnerability...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! information disclosure - CVE-2023-23752 exploit Explo...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! information disclosure - CVE-2023-23752 exploit Joo...
Joomla! 4.2.7 Unauthenticated Information Disclosure
!/usr/bin/env ruby Exploit Title: Joomla! = 4.2.8 References: - https://nsfocusglobal.com/joomla-unauthorized-access-vulnerability-cve-2023-23752-notice/ - https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html -...
XStream can cause a Denial of Service
Impact The vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected, who followed the recommendation ...
XStream is vulnerable to an Arbitrary Code Execution attack
Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Impact The vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. No user is affected, who followed the recommendation to setup XStream's security...
WAFW00F v1.0.0 - Detect All The Web Application Firewall!
WAFW00F identifies and fingerprints Web Application Firewall WAF products. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...