CVE-2021-22986_Check

CVE-2021-22986Check CVE-2021-22986 チェッカースクリプト（Python3） 使用方法: python3 checker.py -u http://url 出力: HOST IS NOT VULNERABLE: | | | / | | | | | | | | | | | | | | | | \ \ | ' | |/ | | | | | | | | | | | | | || |/ |/| ./||/||| | | || Vuln Checker ! Target: http://URL + http://URL is NOT Vulnerable...

fudcrypt

fudcrypt 基于 Python3 的混淆器，可轻松绕过任何杀毒软件。 重要提示： 1. 确保你的 payload 文件已导入所有库，并且是一个有效的 payload 文件 2. 如果你的 payload 被检测到，请告知我，我会更新 stub。 3. 如果你需要 Cobalt Strike 规避功能，请通过 Telegram 私信我：https://t.me/whoami502 使用方法： 1. python3 crypt.py （适用于 Linux） 2. python crypt.py （适用于 Windows） 使用步骤： 1. 在 GitHub 上找到任何基于 Python...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openshell: openshell-0.1.2-0.2.hum1 aarch64, x8664 openshell-gateway-0.1.2-0.2.hum1 aarch64, x8664 python3-openshell-0.1.2-0.2.hum1 aarch64, x8664 openshell-0.1.2-0.2.hum1.src src Security Fixes:...

CVE-2023-6895

python3 CVE-2023-6895.py -u http://target.com -c cmd...

DNSSpoof

DNSSpoof 一个用 Python3 编写的 DNS 欺骗工具。 如何使用？ usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t TARGET Target's IP. If not specified...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses netty-handler-4.1.135.Final.jar, ion-java-1.11.1.jar, js-yaml-4.3.0.tgz, tar-7.5.20.tgz, python3.12 3.12.13-3.el98, github.com/go-jose/go-jose/v4 v4.1.3, github.com/apache/thrift v0.22.0, and google.golang.org/grpc 1.71.0 which are vulnerable to CVE-2026-62243,...

Windows-Exploit-Suggester-Python3

Windows-Exploit-Suggester-Python3 python3 windows-exploit-suggester.py --update libreoffice --headless --convert-to xls 2021-07-15-mssb.xlsx python3 windows-exploit-suggester.py --database 2021-07-15-mssb.xls --systeminfo systeminfo.txt 示例 : 所以我们应该将 xlsx 转换为 xls...

CMS-made-simple-sqli-python3

CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQLインジェクション python3用に書き直し, CVE-2019-9053 このエクスプロイトをKali Linuxで実行するのは問題がありました。python2にはtermcolorがないため、わずかな修正でpython3で動作するようにしました。 すべてのクレジットは: https://www.exploit-db.com/exploits/46635 https://tryhackme.com の脆弱なCMSマシンでテストしました。期待通り動作しています。...

SSH-User-Enum-Python3-CVE-2018-15473

SSH-User-Enum-Python3-CVE-2018-15473 SSH用户枚举工具，Python3实现，CVE-2018-15473，我已将此漏洞利用代码（https://www.exploit-db.com/exploits/45939）更新为使用Python3而非Python2，并正在尝试实现枚举多个用户而非仅单个用户的功能。 OpenSSH 7.7 - 用户枚举脚本（Python3） sshuserenum3.py 运行良好，使用方法： python3 sshuserenum3.py 10.10.10.84 -p 22 root IP = 位置参数 -p 指定SSH端口...

CVE-2019-19781-poc

CVE-2019-19781-poc 修正されたPoC、Python3対応 python3 CVE-2019-19781.py http://example.com...

dirtycups

dirtycups.py Dirty CUPS 是一款免费的 Linux/Unix CVE 扫描器（Python3 脚本），用于验证目标是否存在 CVE-2024-47176 漏洞。这是一款基于 MalwareTech 的 cupsscanner.py 的纯套接字 CUPS 扫描器：https://github.com/MalwareTech/CVE-2024-47176-Scanner/blob/master/cupsscanner.py 原始脚本 jimi2x 功能 创建本地套接字监听器用于回调 触发来自目标的响应 等待传入连接 快速安装说明： Nothing to install,...

CVE-2026-19672 affecting package python3 for versions less than 3.12.14-2

CVE-2026-19672 affecting package python3 for versions less than 3.12.14-2. A patched version of the package is available...

CVE-2026-15806 affecting package python3 for versions less than 3.12.14-2

CVE-2026-15806 affecting package python3 for versions less than 3.12.14-2. A patched version of the package is available...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1789747235)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789747235 advisory. - bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with th...

CentOS Linux 8.4 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1752654760)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1752654760 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / python3-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1753207418)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1753207418 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc (CENTOS7:CLSA-2025:1759857092)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1759857092 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

Rocky Linux 9 [CIQ] Security Update: python3-jinja2 (crlsa-2024_9150)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20249150 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Tenable has extracted the preceding description block directly from the CIQ security advisor...

AlmaLinux 9.2 [TuxCare] Security Update: python3-setuptools / python3-setuptools-wheel (ALMALINUX9.2:CLSA-2026:1786468462)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786468462 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList...

Rocky Linux 8 [CIQ] Security Update: python3-urllib3 (crlsa-2024_5309)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20245309 advisory. urllib3: proxy-authorization request header is not stripped during cross-origin redirects CVE-2024-37891 Tenable has extracted the preceding description block...