594 matches found
CVE-2025-0108
Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...
mediator
Mediator 是一个端到端加密的反向 shell，操作员和 shell 连接到一个"中介"服务器，该服务器桥接连接。这消除了操作员/处理程序设置端口转发以监听连接的需要。Mediator 还允许您创建插件来扩展反向 shell 的功能。 您可以将 Mediator 的脚本作为独立可执行文件运行，也可以导入它们以集成到其他渗透测试和事件响应工具中。 架构： 受端到端加密聊天应用的启发，Mediator 对反向 shell 的客户端/服务器模型采用了独特的方法。Mediator 使用： 1. 客户端反向 shell 2. 客户端处理程序/操作员 3. 一个桥接这两个连接的服务器 反向...
CVE-2014-6271
CVE-2014-6271 Usage go run CVE-2014-6271.go www.example.com 80 whoami...
CVE-2026-71260
CVE-2026-71260 affects ESPHome up to 2026.7.0-dev. In the web_server component, a text entity with mode: password correctly masks the TEXT field in the JSON 'state', but the serialization path unconditionally writes the raw password into the JSON 'value' field via set_json_icon_state_value()/set_...
EUVD-2025-209542
HCL BigFix Service Management SM Discovery is vulnerable to unenforced encryption due to port 80 HTTP being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data...
CVE-2026-33472
Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority that allows an attacker to bypass the security fix for CVE-2026-32303. The method hardcodes the URI scheme based on port number, causin...
CVE-2026-2491
Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw...
CVE-2024-39341
Entrust Instant Financial Issuance On Premise Software formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier leaves behind a configuration file i.e. WebAPI.cfg.xml after the installation process. This file can be accessed without authentication on HTTP port 80 by guessin...
CVE-2022-0650
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...
CVE-2020-17409
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists...
SmartLink HW-PN和SmartLink HW-DP 安全漏洞
SmartLink HW-PN and SmartLink HW-DP are both edge gateway products for industrial automation from SmartLink USA. A security vulnerability exists in SmartLink HW-PN version 1.03 and earlier and SmartLink HW-DP version 1.31, which stems from a scan of TCP port 80 could cause the web server to crash...
EUVD-2010-1571
Malware in sbrugna...
EUVD-2001-1413
Malware in sbrugna...
EUVD-2020-2735
Malware in sbrugna...
EUVD-2007-4714
Malware in sbrugna...
EUVD-2025-23257
Malicious code in bioql PyPI...
EUVD-2022-49818
Malicious code in bioql PyPI...
EUVD-2023-38358
Malicious code in bioql PyPI...