6325 matches found
CVE-2024-6387
CVE-2024-6387 通过下面的一行bash脚本检查你的服务器是否存在CVE-2024-6387漏洞： curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...
CVE-2023-22518
CVE-2023-22518 用于利用存在CVE-2023-22518不當授權漏洞的Confluence服务器的漏洞利用工具 安装： git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py 用法： python3 exploit.py -h usage: exploit.py -h -d DOMAIN -dL DOMAINSLIST -o OUTPUT -to TIMEOUT -px PROXY -v DESCTIPTION: Exploitation and...
XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)
XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...
CVE-2024-3094-One-Liner
CVE-2024-3094 单行漏洞检查器 此仓库提供简单而强大的单行脚本，旨在帮助您快速判断服务器是否容易受到 CVE-2024-3094 的攻击，这是在 xz 工具的某些版本中发现的一个关键安全漏洞。此外，我们还提供了一种便捷的方法来扫描您的代码仓库中是否有对 xz 库的引用，这可能表明存在潜在的间接漏洞。 检查服务器漏洞 要确定您的服务器是否容易受到 CVE-2024-3094 的攻击，请在终端执行以下命令： type dpkg &/dev/null && dpkg -l xz 2/dev/null | awk '/^ii/print $3' | grep -qE...
shocker
Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...
CVE-2024-21182
Oracle WebLogic Server JNDI 漏洞 仅供教育目的使用...
Vendure - Arbitrary File Read
Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...
Angular-Base64-Upload - Remote Code Execution
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...
CVE-2017-12542
CVE-2017-12542 此脚本检查 HP iLO 服务器是否存在漏洞，并可添加一个管理员用户。...
Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-
Explotación-RCE-no-autenticado-JetBrains-TeamCity-CVE-2024-27198- En febrero de 2024, se identificaron dos nuevas vulnerabilidades que afectan al servidor JetBrains TeamCity CVE-2024-27198 y CVE-2024-27199...
CVE-2019-1006
CVE-2019-1006 用法： 在终端中输入 "python CVE-2019-1006.py "url""，其中 url 是要测试的 RDG Gateway 服务器的 URL。 示例： python CVE-2019-1006.py "https://www.aaa.com/"...
Detect-CVE-2019-19781
Detect-CVE-2019-19781 设置 $IP 变量为您自己的服务器，以检测其是否易受攻击。...
Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload
Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides an empty password value. This issue affects FreeRDP-based RDP Server implementations. RDP clients are not affected. The...
Astra Linux – Vulnerability in Apache2
Inconsistent interpretation of HTTP requests: The “HTTP Request Smuggling” vulnerability in modproxyajp of the Apache HTTP Server allows an attacker to secretly send requests to the AJP server to which the server forwards requests. This issue affects the Apache HTTP Server version 2.4.53 and...
Astra Linux – Vulnerability in Mariadb 10.3
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. The supported versions affected are 5.7.33 and earlier, as well as 8.0.23 and earlier. This easily exploitable vulnerability allows a highly privileged attacker with network access via multiple protocols to compromi...
Astra Linux – Vulnerability in etcd
A cross-site request forgery flaw was discovered in etcd 3.3.1 and earlier. An attacker can create a website that attempts to send a POST request to the etcd server and modify a key. Adding a key is done using a PUT operation, so it seems theoretically safe but PUT operations cannot be performed...
BIT-CONSUL-2026-16498 terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fix...
