CVE-2026-41940

CVE-2026-41940 ✅ スクリプト分析（スキャナーの動作と仕組み） ✅ 根本原因の技術的説明（CRLF/Session.pm の差分） ✅ 予防 — パッチコマンド、セキュアコーディングの教訓 ✅ 緩和策 — ファイアウォールルール、WAF設定、堅牢化 ✅ IOCハンティング — 既に攻撃を受けたかどうかの検出 ✅ VaPT手法 — スコープ設定、偵察、報告フレームワーク、MITREマッピング ✅ リスクスコアリング、モバイルナビゲーション、コピーボタン、折りたたみセクション...

NginxHunter

NginxHunter 설명 NginxHunter는 Nginx 액세스 로그를 분석하여 보안 취약점과 의심스러운 활동을 탐지하도록 설계된 종합 도구입니다. SQL 인젝션 시도, 스캐너 도구, 민감한 경로 접근, 익스플로잇 시도, 웹쉘 등을 감지합니다. Nginx 서버 보안을 강화하려는 시스템 관리자 및 보안 전문가에게 적합합니다. 사용법 루트 권한 사용 root@kitploit: $ wget...

veilgate

VeilGate VeilGate 是一个开源欺骗代理，适用于希望通过提高自动安全探测成本而不在真实用户面前设置脆弱阻断规则的团队。 它位于 Web 应用之前，对每个请求进行评分，并选择三种结果之一： Real ：将干净流量转发到上游应用。 Challenge ：要求可疑但模棱两可的客户端解决浏览器工作量证明。 Tarpit ：将高置信度代理流量分流到确定性虚假应用。 目标不是魔法般的不可攻破。目标是更好的经济学：让人类和正常自动化流畅运行，同时让 AI 辅助的扫描器将时间、代币和注意力浪费在可信的死胡同里。 功能 反向代理，支持 observe、challenge、tarpit...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Автоматизируйте процесс анализа журналов веб-сервера с помощью Python Web Log Analyzer. Этот мощный инструмент предназначен для повышения безопасности путем выявления и обнаружения различных типов кибератак в ваших серверных журналах. Оставайтесь на шаг впереди потенциальных...

react2shell-scanner

react2shell-guard Security scanner for CVE-2025-55182 - a critical CVSS 10.0 unauthenticated Remote Code Execution vulnerability in React Server Components. ⚠️ DISCLAIMER This is a security scanner , NOT an exploit tool. It is designed to help developers and security teams identify vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2026-18695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write...

Linux Distros Unpatched Vulnerability : CVE-2026-68089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

Dell Enterprise SONiC OS Detection

Binary data dellsonicosinstalled.nbin...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

Linux Distros Unpatched Vulnerability : CVE-2025-38061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pktgen: fix access outside of user given buffer in pktgenthreadwrite Honour the user given buffer size for the strnlen calls otherwise strnlen will access...

Microsoft Exchange Admin Center Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Exchange Admin Center instance on the target application. No source data...

Voiceflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Voiceflow chatbot on the target application. Voiceflow is a solution to build & deploy AI customer experiences. This detection is included in the AI and LLM category. No source data...

MCP Manifest Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol manifest on the target server. No source data...

GitLab Public Sign-Up Detected

This is an informational notice that the scanner was able to detect a GitLab public sign-up page on the target instance. No source data...

Linux Distros Unpatched Vulnerability : CVE-2016-10196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2011-4077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

SonarQube Public Projects Detected

A SonarQube Public Projects response have been detected on the target web application. These response may contain sensitive information which could assist an attack to conduct further attacks. No source data...

H2OGPT Detection

A H2OGPT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208135; scriptversion"1.6";...