apache_audit_cve-2026-23918

cve-2026-23918 CVE-2026-23918 Apache HTTPD HTTP/2 डबल-फ्री RCE और 4 मई, 2026 को Apache Software Foundation सुरक्षा परामर्श में खुलासा किए गए चार संबंधित CVE के लिए रक्षात्मक ऑडिट उपकरण। CVE| गंभीरता| घटक| प्रभाव| प्रभावित संस्करण ---|---|---|---|--- CVE-2026-23918| उच्च CVSS 8.8| HTTP/2| डबल फ्री...

cve-2016-20012

CVE-2016-20012 SSH Username Enumeration Script This Python script attempts to enumerate valid usernames on an SSH server by trying to connect with an invalid password. It measures the response time for each username to identify possible valid accounts based on server behavior. Table of Contents...

external_tcpdump_CVE-2018-14879

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

Gin-Vue-admin-poc-CVE-2022-21660

Gin-Vue-admin Vertical Privilege Escalation Vulnerability and Code Analysis - CVE-2022-21660 1. Foreword Welcome everyone to give this project a star.http https://github.com/flipped-aurora/gin-vue-admin/ root@kitploit: After finishing the article, applying for a CVE was somewhat troublesome, but...

kube-beacon

Kube-Beacon Project Scan your kubernetes runtime !! Kube-Beacon is an open source audit scanner who perform audit check on a deployed kubernetes cluster and output a security report. The audit tests are the full implementation of CIS Kubernetes Benchmark specification...

CVE-2024-3094-info

CVE-2024-3094-info CVE-2024-3094 PoC Exploration https://github.com/amlweems/xzbot https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin response https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

mitigate-folina

mitigate-folina Mitigates the "Folina"-ZeroDay CVE-2022-30190 and "Search"-Nightmare no CVE given at the moment This script will backup and then remove the affected registry key as suggested by Microsoft to mitigate CVE-2022-30190. If parameterized with "-revert" the script will reimport the key...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

CVE-2022-22718

A Privilege Escalation Vulnerability In Windows Print Spooler On Feb 9, 2022: The US Cyber in Infrastructure Security Agency CISA added the Windows Print Spooler vulnerability to their list of actively exploited vulnerabilities. The vulnerability was identified as CVE-2022–22718 with the Common...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - tracer-behavior एंडपॉइंट के माध्यम से OS कमांड इंजेक्शन Fortinet FortiSandbox एक उन्नत खतरा सुरक्षा समाधान है जो संदिग्ध फ़ाइलों, URLs और नेटवर्क ट्रैफ़िक के दुर्भावनापूर्ण व्यवहार का विश्लेषण करने के लिए पृथक वातावरण बनाता है। यह स्टैटिक एनालिसि...

CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

EUVD-2026-72056

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168

A SQL injection vulnerability exists in code-projects Content Management System 1.0 , specifically in the user_name parameter of the /login.php file. The flaw can be exploited remotely without authentication , resulting in partial impact to confidentiality, integrity, and availability (CVSS 3.1 s...

CVE-2024-24919-Sniper

CVE-2024-24919-Sniper अवलोकन CVE-2024-24919 स्नाइपर एक Python स्क्रिप्ट है जो Check Point Security Gateway सूचना प्रकटीकरण कमजोरियों के लिए स्कैन करने के लिए डिज़ाइन की गई है। यह स्क्रिप्ट सिंगल-टार्गेट और बल्क स्कैनिंग दोनों कर सकती है, स्कैनिंग गति बढ़ाने के लिए मल्टीथ्रेडिंग का उपयोग करती है। ...

cfn_nag

الخلفية تبحث أداة cfn-nag عن أنماط في قوالب CloudFormation قد تشير إلى بنية تحتية غير آمنة. بشكل تقريبي، ستبحث عن: قواعد IAM متساهلة للغاية wildcards قواعد مجموعات الأمان متساهلة للغاية wildcards سجلات وصول غير مفعّلة تشفير غير مفعّل قيم حرفية لكلمات المرور لمزيد من الخلفية حول الأداة، يرجى الاطل...

ThreadlessInject

حقن العمليات بدون خيوط من حديثي في Bsides Cymru 2023: إبر بلا خيط. كفريق أحمر، نجد أنفسنا دائمًا في لعبة القط والفأر مع الفريق الأزرق. أصبحت العديد من حلول مكافحة الفيروسات والحماية EDR خلال السنوات العشر الماضية أكثر تقدمًا بشكل ملحوظ في كشف نشاط البرمجيات الخبيثة عديمة الملفات بطريقة عامة. حقن...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

CVE-2023-20198-Scanner

Cisco IOS XE Device Scanner User Guide for CVE-2023-20198-Scanner This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273. This Python script checks for compromised Cisco IOS XE devices by making HTTP and HTTPS...

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...