CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, docker-credential-gcr-fips, redis-operator, age-fips, rabbitmq-messaging-topology-operator-fips, node-feature-discovery-fips, kube-logging-operator-custom-runner, newrelic-nri-statsd, prometheus-statsd-exporter-fips,...

Exploit for CVE-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehens...

CVE-2025-66644: Improper Neutralization of Special Elements used in an OS Command

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025...

CVE-2025-65730: Use of Hard-coded Credentials

Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used for authentication...

Nuclei 3.6.0

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner React2Shell A community tool to dete...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner Fast, concurrent vulnerability scanner...

AZL-71510 CVE-2025-65637 affecting package cni-plugins for versions less than 1.4.0-4

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

Exploit for CVE-2025-66478

Next.js RSC RCE Scanner CVE-2025-66478 A command-line scann...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

CVE-2025-13488: Improper Neutralization of Input During Web Page Generation

Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may allow an authenticated attacker with repository upload privileges to exploit a stored cross-site scripting XSS vulnerability with user conte...

Adobe Experience Manager (AEM) CRX Content Explorer

This plugin detects the presence of the Adobe Experience Manager AEM CRX Content Explorer interface. The CRX Content Explorer is a web-based interface used to manage and interact with the content repository of Adobe Experience Manager. No source data...

CVE-2025-57212: Improper Access Control

Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request...

CVE-2025-9127: Improper Encoding or Escaping of Output

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

Adobe Experience Manager (AEM) Merge Metadata Servlet Detected

This plugin detects the presence of the Adobe Experience Manager AEM Merge Metadata Servlet. The Merge Metadata Servlet is used to merge metadata from different sources within the AEM environment. No source data...

CVE-2025-29269: Improper Neutralization of Special Elements used in an OS Command

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...

Photon OS 5.0: Cups PHSA-2025-5.0-0697

An update of the cups package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0697. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-66561: Improper Neutralization of Input During Web Page Generation

SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting XSS vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This...