CVE-2019-19782

CVE-2019-19781 Soporta detección por lotes Uso: python CVE-2019-19781.py Para detectar la URL objetivo, cree url.txt en el directorio actual del script. url.txt, una línea por URL: http://xxx:port/ https://xxx:port/ Salida: Enlaces vulnerables: res.txt Enlaces erróneos: log.txt...

CVE-2017-4490-install-Script-Python-in-Terminal-

CVE-2017-4490-터미널에서-Python-스크립트-설치- CVE-2017-4490이란? 사후 익스플로잇, == 자, 내 익스플로잇 아이디어, .bashrc 사용 많은 아이디어가 해롭다. 1 터미널에서 .bashrc를 사용하여 webdeilvary 스크립트 설치 2 터미널에서 끔찍한 텍스트를 파괴하고 표시 3 전복 및 새 터미널 열림 차단 webdeilvary 스크립트 다운로드 및 설치 git clone...

CVE-2021-34045

CVE-2021-34045 PoC de escaneo masivo de acceso no autorizado a Druid Uso de la herramienta python3 CVE-2021-34045.py -u http://127.0.0.1:1111 Prueba de una sola URL python3 CVE-2021-34045.py -f url.txt Detección masiva Descargo de responsabilidad Cualquier consecuencia o pérdida directa o indirec...

CVE-2014-4688-NodeJs-Exploit

CVE-2014-4688 sudo node --no-warnings exploit.js...

FuxiOS

FuxIOS.py v2.0 - CVE-2016-4631 Exploit PoC � Nota Personal 2025 ¿Por qué publico esto ahora? Mientras revisaba viejos discos duros y repositorios olvidados, me encontré con este script que escribí hace años cuando apenas comenzaba mi carrera en ciberseguridad. Era una época diferente - Python 2.7...

CVE-2023-20209

I started looking at Cisco Expressway after I noticed quite a few of them on the internet during Red Team engagements, but never had the time during work to explore the product further. Initially I was looking for an auth bypass to chain into RCE but ran out of time and settled on a post auth RCE...

CLEANSTART-2026-OX66799 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...

CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...

watchtowr-vs-telnetd-CVE-2026-32746

watchtowr-vs-telnetd-CVE-2026-32746 Generador de artefactos de detección para telnetd CVE-2026-32746. Consulte nuestra publicación en el blog para obtener detalles técnicos. Detección en acción python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ /...

slowloris

slowloris.py - 파이썬으로 만든 간단한 slowloris Slowloris란 무엇인가? Slowloris는 기본적으로 스레드 기반 서버에 영향을 미치는 HTTP 서비스 거부 공격입니다. 작동 방식은 다음과 같습니다: 1. 많은 HTTP 요청을 시작합니다. 2. 연결을 유지하기 위해 주기적으로약 15초마다 헤더를 보냅니다. 3. 서버가 연결을 닫지 않는 한 절대 연결을 닫지 않습니다. 서버가 연결을 닫으면 새 연결을 만들어 같은 작업을 계속합니다. 이렇게 하면 서버의 스레드 풀이 소진되어 서버가 다른 사용자에게 응답할...

PT-2026-107976

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

EUVD-2026-92633

Ghost : Stored XSS via SVG Files in Content Imports...

defender

🛡️ Linux-Defender.sh 📝 Tabla de Contenidos 📌 Descripción general 🚀 Características 🐧 Distribuciones soportadas 📦 Herramientas instaladas ⚙️ Instalación Construcción desde el Código Fuente General 📦 Instalación por Paquete Paquete Debian .deb Paquete Arch Linux 🧰 Ejecutando el Defender 🧾 Licencia...

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92756

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...

GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

cve-2021-41773-nse

cve-2021-41773-nse Por George Labrin @creadpag N|Solid Comprueba si el servidor es vulnerable a Apache 2.4.49 CVE-2021-41773. POC Abre tu terminal favorita y ejecuta estos comandos. Primera pestaña: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Segunda pestaña: sudo nmap -Pn...

PS-CVE-2021-21551

Description Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil23.sys, installed by some DELL tools BIOS updater, SupportAssist.... It uses WinRM to invoke the checks on every domain-member computers. Tries to clean the vulnerable driver...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Script en bash que permite identificar y/o explotar la vulnerabilidad Log4shell de forma remota. Esta herramienta realiza distintas pruebas usando LDAP payloads y cabeceras X-Api-Version, User-Agent y X-Forwarded-For. Siempre utilizar este script con autorización previa...

CVE-2026-106575

A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...