asa_tools

Cisco ASA RCE Verification This script can be used to verify the presence of CVE-2016-1287. It requires python3 and the python hexdump module to be installed $ sudo pip3 install hexdump It can be run as follows python3 cisco-asa.py IP.IP.IP.IP:port...

CVE-2020-17519

使用方法&免责声明 该脚本为Apache Flink 目录遍历漏洞批量检测 CVE-2020-17519。 使用方法：Python CVE-2020-17519.py urls.txt urls.txt 中每个url为一行，漏洞地址输出在vul.txt中 影响版本： Apache Flink 1.11.0、1.11.1、1.11.2 工具仅用于安全人员安全测试，任何未授权检测造成的直接或者间接的后果及损失，均由使用者本人负责...

CVE-2025-30406

CVE-2025-30406 PoC de Exploit de ViewState Resumen Este es un script de Prueba de Concepto PoC que demuestra una explotación de deserialización de ViewState para CVE-2025-30406 en aplicaciones ASP.NET. Utiliza ysoserial para generar un payload malicioso de ViewState y lo envía a una URL...

CVE-2026-86218

CVE-2026-86218 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

CVE-2020-13942

CVE-2020-13942 Apache Unomi RCE sin autenticación exploit de CVE-2020-13942 POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json...

CVE-2024-31666

Resumen de la vulnerabilidad Existe una vulnerabilidad en Flusity-CMS v.2.33 que permite a atacantes remotos ejecutar código arbitrario a través de scripts especialmente diseñados en el componente editaddonpost.php. Versiones afectadas Flusity-CMS v.2.33 Detalles de la vulnerabilidad Los atacante...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: initramfs: Avoid filename buffer overflow The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as follows: plaintext 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 +...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the keyboard interface in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fixed soft lockups in fib6selectpath under high next hop changes. Soft lockups were observed on a cluster of Linux-based edge routers located in a highly dynamic environment. Using the bird service, these routers continuous...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Chromecast within Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. Chromium security severity: Low...

CVE-2026-59787

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity...

CVE-2021-46071

CVE-2021-46071 Título del Exploit: Vehicle Service Management System - 'Category List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIO Referencias:...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR Este documento describe el propósito y el funcionamiento básico del script de adquisición FLAIR. Propósito Durante la investigación de incidentes en el entorno de los clientes, hay ocasiones en las que no hay un EDR desplegado del que e...

macOSTriageCollectionScript

macOSTriageCollectionScript Un script de recopilación de datos de triaje para macOS que utiliza sysdiagnose con algunas adiciones para reunir datos de triaje útiles para investigaciones. ¿Qué recopila el script? Los datos recopilados incluyen: sysdiagnose , una utilidad presente en varios sistema...

shadowhammer

Comprobador de direcciones MAC Shadowhammer en modo lote Kaspersky descubrió y analizó recientemente el ataque 'Shadowhammer' https://securelist.com/operation-shadowhammer/89992. Realizaron un gran análisis y publicaron una herramienta para que los administradores de sistemas pudieran determinar ...

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

CVE-2024-41301 - Bookea-tu-Mesa 存在存储型跨站脚本漏洞 Bookea-tu-Mesa 容易受到存储型跨站脚本（XSS）漏洞的影响。此缺陷允许攻击者注入恶意脚本，这些脚本会在用户会话的上下文中执行。 复现步骤： 1. 访问 http://localhost/Bookea-tu-Mesa/index.php 2. 在“全名”字段中输入 "" 并提交。 3. 脚本执行，展示了 XSS 漏洞。 漏洞代码： 文件：insertreservation.php 第 11 行：$Fname = mysqlirealescapestring$conex,...

CVE-2026-42945-NGINX-Rift-Check-Script

Este repositorio no tiene un README...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC Un script bash para explotar fácilmente la vulnerabilidad de lectura arbitraria de archivos de ImageMagick CVE-2022-44268 Versión de ImageMagick afectada Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick...

CVE-2023-38831

CVE-2023-38831 CVE-2023-38831 漏洞的概念验证演示 漏洞简要描述 CVE-2023-38831 是一个软件漏洞。 被利用的软件是 WinRAR，几乎每个人都在广泛使用它。 它是一款帮助将不同文档或文件压缩成小型归档文件（zip 格式）的软件，从而节省空间，使文件共享更轻松、更快速。 该漏洞于 2023 年 4 月被发现。 它影响 Windows 操作系统及 6.22 及以下版本。 漏洞是由 WinRAR 后端代码中一个名为“winrar.7FF6CE909948”的有缺陷函数引起的，该函数未检查参数，也未比较 zip...