Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fixed deadlock issue when using the NCM gadget The cdns3 driver suffers from the same deadlock issue as fixed in cdnsp with the commit 58f2fcb3a845 „usb: cdnsp: Fixed deadlock issue during use of the NCM gadget”. Unde...

CVE-2026-9082-Mass_Scanner

CVE-2026-9082-MassScanner Escáner Masivo para el Exploit de Drupal CVE-2026-9082 Para configurar el script ExploitPOC ejecuta este comando : pip install requirements.txt Para usar el script ExploitPOC ejecuta este comando : python exploitpoc.py -t targets.txt -o results.txt -p 16 Un escáner masiv...

OWA-Password-Sprayer

OWA-Password-Sprayer Sprayer de contraseñas OWA Este script de Python facilita el rociado de contraseñas password spraying contra endpoints de Outlook Web Access OWA. El rociado de contraseñas es una técnica utilizada para probar una única contraseña contra múltiples usuarios, con el objetivo de...

CVE-2020-0796-Batch-scanning

CVE-2020-0796 Escaneo por lotes Debido a que otras herramientas de escaneo tienen una tasa de falsos positivos demasiado alta para la verificación de CVE-2020-0796, y la herramienta de Qi-Anxin no puede especificar IP por lotes Así que escribí esto casualmente, colocando las IP en un archivo txt,...

CVE-2022-26134-POC

Descripción: Esta es una herramienta de script que admite la detección por lotes de múltiples subprocesos de la vulnerabilidad de inyección OGNL de Confluence CVE-2022-26134 Tutorial de uso: El archivo url.txt contiene las direcciones objetivo Resultados: 1. Detección de un solo objetivo 2...

CVE-2025-24813-Exploit

CVE-2025-24813-Exploit Exploit de ejecución remota de código RCE en Apache Tomcat - CVE-2025-24813 🚀 Exploit de RCE en Apache Tomcat - CVE-2025-24813 🔥 Herramienta de Exploit y Detección para Apache Tomcat RCE CVE-2025-24813 Este repositorio contiene un exploit PoC Prueba de Concepto para la...

Simple Pentesting

Kit de Herramientas de Pentesting Simple Un kit de herramientas Python ligero y educativo que automatiza tareas comunes de reconocimiento y enumeración utilizadas en pruebas de penetración autorizadas. Creado como un proyecto de aprendizaje para la práctica de ciberseguridad / hacking ético. ⚠️ Us...

SMBGhost

SMBGhost Escáner simple con hilos para CVE-2020-0796 - SMBv3 RCE. El escáner está pensado únicamente para probar si un servidor es vulnerable. No está pensado para investigación o desarrollo, de ahí el payload fijo. Comprueba el dialecto SMB 3.1.1 y la capacidad de compresión mediante una petició...

cdn-ip-scanner

CDN IP Scanner V2.0 High Accuracy • Ultra Fast • AI Powered English • فارسی • Download • Donate 🇬🇧 English What is CDN IP Scanner? CDN IP Scanner is a powerful, web-based tool for scanning and finding the fastest CDN Content Delivery Network IP addresses. It helps users discover clean, low-latency...

CVE-2017-9841

🔍 Características Escaneo multi-hilo para pruebas eficientes de múltiples objetivos Generación inteligente de payloads con identificadores únicos para una validación precisa Comprobación de múltiples rutas de vulnerabilidad en estructuras comunes de aplicaciones web Validación automática de...

Routeglass

Routeglass - High speed Router & Network Appliance Fingerprinting Tool Routeglass is a fast, multi-threaded router fingerprinting tool written in Go. The goal of the project is simple: identify web-exposed routers, firewalls, gateways, and embedded network devices by fingerprinting HTTP responses...

INtrack

INtrack - 인터넷 크롤러 및 보안 스캐너 INtrack은 네트워크 정찰, 취약점 탐지, 보안 평가를 위해 설계된 강력한 멀티스레드 보안 스캐너이자 인터넷 크롤러입니다. 다양한 인스턴스, 취약점, IoT 기기, 노출 항목 등을 스캔할 수 있습니다. 기능 🔍 포괄적 스캔 : 웹 서버, 애플리케이션, 취약한 서비스 등을 탐지 🌐 유연한 대상 선택 : 단일 호스트, 서브넷, 무작위 인터넷 IP 또는 파일의 대상 스캔 🛠️ 다양한 스캐너 유형 : 알려진 CVE에 대한 취약점 스캐너 인스턴스 탐지 WordPress, Jira,...

Rocky Linux 10.0 [CIQ] Security Update: xz / xz-debuginfo / xz-debugsource / xz-devel / xz-libs / etc (crlsa-2025_7524)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257524 advisory. xz: XZ has a heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Tenable has extracted the preceding description block directly from the CIQ security...

The vulnerability of the function ieee80211_invoke_fast_rx() in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211invokefastrx in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux operating system, is related to the control element that is called in a multi-threaded context with a non-final static element or member. Exploiting this vulnerability...

EUVD-2026-89014

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server...

CVE-2026-84783 Use-After-Free in X.509 Extension Cache Under Concurrent Use

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server...

cPanelScanner

🔍 cPanel スキャナー Go で書かれた、高速でマルチスレッドの cPanel 検出ツールです。IP アドレス、CIDR レンジ、またはファイルから読み込んだターゲットリストをスキャンし、ポート 2082、2083、2087 で動作している cPanel サービスを特定します。 ✨ 機能 マルチスレッドスキャン — 同時実行数を設定可能 CIDR 対応 — サブネット全体をスキャン ファイル入力 — ファイルからターゲットを1行につき1つ読み込む 出力保存 — 検出した URL をファイルに保存 cPanel 検出 — ヘッダー、タイトル、コンテンツ、一般的なパスを確認 プログレス...

CVE-2024-2997

CVE-2024-2997 スキャナー 概要 CVE-2024-2997 スキャナーは、Webアプリケーションのコマンドインジェクション脆弱性を検出するために設計された高度な脆弱性スキャナーです。このツールは、セキュリティ専門家がアプリケーションの潜在的なセキュリティリスクを特定するのに役立ちます。 免責事項 このツールは教育目的のみ を対象としています。所有しているアプリケーション、またはテストの許可を得たアプリケーションに対してのみ使用してください。作者は、このツールの誤用またはそれによって生じた損害について一切責任を負いません。 特徴 高性能スキャン :...

CVE-2026-84783: Use After Free

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server...

Use-After-Free in X.509 Extension Cache Under Concurrent Use

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server...