veilgate

VeilGate VeilGate is an open-source deception proxy for teams that want to raise the cost of automated security probing without putting fragile block rules in front of real users. It sits in front of a web application, scores each request, and chooses one of three outcomes: Real : forward clean...

NginxHunter

NginxHunter Description NginxHunter is a comprehensive tool designed to analyze Nginx access logs for security vulnerabilities and suspicious activities. It detects SQL injection attempts, scanner tools, sensitive path accesses, exploitation attempts, webshells, and more. Ideal for system...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

CVE-2026-41940

CVE-2026-41940 ✅ Script analysis what the scanner does and how ✅ Root cause technical explanation the CRLF/Session.pm diff ✅ Prevention — patch commands, secure coding lessons ✅ Mitigation — firewall rules, WAF config, hardening ✅ IOC hunting — detecting if you were already hit ✅ VaPT methodology...

react2shell-honeypot

React2Shell honeypot My attempt to make honeypot for React2Shell vulnerability All attack payloads are written to logs/ip folder Usage root@kitploit: go build Optionally: export GINMODE=release react2shell-honeypot -addr localhost:8080 Tested on scanners: assetnote/react2shell-scanner...

Linux Distros Unpatched Vulnerability : CVE-2026-18695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write...

Linux Distros Unpatched Vulnerability : CVE-2026-68089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer wi...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

Dell Enterprise SONiC OS Detection

Binary data dellsonicosinstalled.nbin...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

Linux Distros Unpatched Vulnerability : CVE-2025-38061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pktgen: fix access outside of user given buffer in pktgenthreadwrite Honour the user given buffer size for the strnlen calls otherwise strnlen will access...

Microsoft Exchange Admin Center Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Exchange Admin Center instance on the target application. No source data...

Voiceflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Voiceflow chatbot on the target application. Voiceflow is a solution to build & deploy AI customer experiences. This detection is included in the AI and LLM category. No source data...

MCP Manifest Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol manifest on the target server. No source data...

GitLab Public Sign-Up Detected

This is an informational notice that the scanner was able to detect a GitLab public sign-up page on the target instance. No source data...

Linux Distros Unpatched Vulnerability : CVE-2016-10196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2011-4077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

SonarQube Public Projects Detected

A SonarQube Public Projects response have been detected on the target web application. These response may contain sensitive information which could assist an attack to conduct further attacks. No source data...

H2OGPT Detection

A H2OGPT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208135; scriptversion"1.6";...