cve-2023-20198

cve-2023-20198 描述. 1vere$k 针对 CVE-2023-20198 的 POC，基于 Blog 开发。同时根据原始 Cisco 文章 包含对十六进制响应的检查。 该脚本支持两种模式： check 模式，仅对特定 URL 进行连接并检查响应码。如果返回 200 OK 且响应长度小于 32 个符号，则表明您的设备 可能 已被入侵。 exploit 模式。在该模式下，您需要定义用户名、密码以及已入侵配置。 根据 Cisco 文章的建议，增加了 http/https 协议支持。 使用 -h 标志获取帮助。 示例: git clone...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

检查 CVE-2025-55182 和 CVE-2025-66478 此脚本检测服务器是否受 RSC/Next.js RCE 漏洞 CVE-2025-55182 和 CVE-2025-66478 影响。 它检查服务器响应中的特定漏洞特征。 根据 Searchlight Cyber 的说法，这些特征应当是特定的。 因此，此 shell 脚本的实现遵循了 Searchlight Cyber 的见解。 我目前只有关于这些 CVE 的德文信息，但这些信息是由德国联邦信息安全办公室官方发布的： React Server Components: Kritische Schwachstelle...

CVE-2023-54258

CVE-2023-54258: In the Linux kernel CIFS code, a race between deferred closes and lease breaks can cause an unmount (kill_sb) to occur before validating tcon->ses during oplock_response, risking a use-after-free. The fix is to reorder checks before sending oplock_response: first ensure openFil...

CVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...

xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

Format string

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

Thomson Reuters Concourse & Firm Central 2.13.0097 Directory Traversal / Local File Inclusion

Exploit for windows platform in category web applications ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Exploit Author: 0v3rride Vendor Homepage: https://www.thomsonreuters.com/en.html Software Link: Firm Central...

U.S. Dept Of Defense: Unencrypted __VIEWSTATE parameter in a DoD website

Hi there i realise that the information passing to the server in the subdomain http://████████ can be seen without any encryption thought the VIEWSTATE Parameter. To reduce the change of someone interception the information the parameter should be encrypted due to the sensivity of the information...

GeoClassifieds Lite Multiple Vulnerabilities (Sep 2011) - Active Check

GeoClassifieds Lite is prone to multiple SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...