66120 matches found
CVE-2023-6895
Escáner de vulnerabilidad CVE-2023-6895 Este es un script simple de Python para escanear sitios web y comprobar si existe la vulnerabilidad CVE-2023-6895. Envía solicitudes modificadas a la URL objetivo y comprueba si la vulnerabilidad está presente en la respuesta. Requisitos del entorno Python ...
CVE-2019-19609-POC-Python
El script intentará restablecer la contraseña a la declarada en la variable "updatedpass"; si lo consigue, otorgará un token JWT de Strapi y lo usará para ejecutar comandos. Ejecutar comandos bind no funcionará a menos que se envíe un payload de reverse shell, con bash o python o lo que sea. Pued...
ProxyShell_POC
ProxyShellPOC POC para escanear ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 uso: python3 Proxyshell.py ip...
CVE-2021-45428-Defacer
comience con un simple: python3 exploit.py...
CVE-2022-30190_Temporary_Fix
🩹Solución temporal para CVE-2022-30190🩹 Estos son dos scripts de Python compilados para aplicar fácil y rápidamente una protección temporal contra la vulnerabilidad CVE-2022-30190 Follina Ambos se pueden programar mejor, pero esto es solo para implementarlo lo más rápido posible y lo hice sin...
cve-2017-8917
Paso 1 - descargar todos los archivos y tener python3 Paso 2 - instalar dependencias pip install -r requirements.txt Paso 2.1 - si las dependencias fallan al instalar, puede ser una restricción de Linux, prueba usar un entorno virtual python3 -m venv venv source ./venv/bin/activate pip install -r...
CVE-2024-48990
CVE-2024-48990 y CVE-2024-48992 Para determinar si un proceso de Python un proceso que está ejecutando el intérprete de Python necesita ser reiniciado, needrestart extrae la variable de entorno PYTHONPATH del archivo /proc/pid/environ de este proceso en la línea 193, establece esta variable de...
cve-2025-55182
CVE-2025-55182 - Exploit de RCE en React Server Components Exploit CLI en Python para CVE-2025-55182, una vulnerabilidad crítica de RCE en React Server Components a través de react-server-dom-webpack. Basado en: ejpir/CVE-2025-55182-poc Construir y ejecutar el contenedor vulnerable docker build -...
CVE-2020-17519
CVE-2020-17519 Herramienta de Traversal de Logs Una herramienta en Python que utiliza una técnica de traversal de directorios para solicitar archivos de registro desde una URL de destino. Muestra el progreso en tiempo real, admite la configuración de proxy y, opcionalmente, guarda las respuestas...
ZX-DDoS
ZX-DDoS ZX-DDoS is a Python-based DDoS Tool for educational and testing purposes only. DISCLAIMER: This repository is strictly for educational, research, and network testing purposes only. The author is not responsible for any misuse or illegal activities. Repository:...
SUSE CVE-2026-57175
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could...
SUSE CVE-2026-57176
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Ven...
SUSE CVE-2026-57177
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the authentication flow. Applications using this backend were vulnerable to login CSRF. An attacker could cause a victim's browser session to...
SUSE CVE-2026-57178
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted. Applications using this backend could treat unsigned...
SUSE CVE-2026-57179
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted partialtoken as a bearer credential without binding it to the browser session that created it. Applications using resumable partial pipeline steps could all...
SUSE CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
SUSE CVE-2026-96749
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
CVE-2024-28397-js2py-Sandbox-Escape
Perkenalan 中文 js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javscript code on websites. There is a vulnerability in the implementation of global variables within js2py, which could allow an attacker t...