76 matches found
CVE-2025-5840
CVE-2025-5840 Эксплойт CVE-2025-5840 на Python от hax / haxerr9 Как использовать: Убедитесь, что Python3 установлен в системе. Запустите "python3 CVE-2025-5840.py URL -c КОМАНДА". Не забудьте указать параметры перед запуском скрипта. Пример использования: НЕ ПРОВЕРЕНО Этот эксплойт не был...
CVE-2020-10199
CVE-2020-10199 Эхо-версия, написана на скорую руку, не тестировалась, есть баги Usage: python http://127.0.0.1:8080 username password Ссылка: https://www.cnblogs.com/magic-zero/p/12641068.html...
CVE-2017-5638
CVE-2017-5638 Переписанный эксплойт CVE-2017-5638 на Python Как использовать: Убедитесь, что в системе установлен Python3. Выполните "python3 CVE-2017-5638.py URL -c COMMAND". Конечная точка URL должна быть файлом '.action'. Не забудьте задать параметры перед запуском скрипта. Пример использовани...
ansible-cve-2023-36845
ansible-cve-2023-36845 Простой и непроверенный Ansible Playbook для обнаружения потенциального CVE-2023-36845. ansible-playbook -i inventory cve-2023-36845.yml Используйте ansible.cfg, чтобы в выводе не отображались пропущенные хосты...
cve-2019-11043.py
cve-2019-11043.py Python-порт PoC-эксплойта ExploitDB. Python-порт ExploitDB 48182 только в образовательных целях Этот проект представляет собой Python-порт PoC-эксплойта ExploitDB 48182. Он создан для обучения и исследований. ⚠ Отказ от ответственности Скрипт не тестировался , поэтому может...
cve-2025-54236
cve-2025-54236 cve-2025-54236 poc пожалуйста, сообщите об ошибке не тестировалось...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-102690)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102690 advisory. A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filterintra at libavfilter/vfbwdif.c, which might lead to memory corruption and other potential...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101145 advisory. Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...
Oracle Linux 8 : .NET / 10.0 (ELSA-2026-54542)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54542 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478 Tenable has extract...
[SECURITY] Fedora 42 Update: perl-Devel-Cover-1.44-7.fc42
This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...
[SECURITY] Fedora 42 Update: mingw-gstreamer1-plugins-bad-free-1.26.11-1.fc42
GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...
[SECURITY] Fedora 44 Update: gstreamer1-plugins-bad-free-1.28.1-1.fc44
GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...
CVE-2025-65009
In WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 admin password is stored in configuration file as plaintext and can be obtained by unauthorized user by direct references to the resource in question. The vendor was notified early about this vulnerability, but didn't respond with th...
CVE-2025-65009 Insecure Password Storage in WODESYS WD-R608U router
In WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 admin password is stored in configuration file as plaintext and can be obtained by unauthorized user by direct references to the resource in question. The vendor was notified early about this vulnerability, but didn't respond with th...
EUVD-2025-197995
Windu CMS is vulnerable to multiple Stored Cross-Site Scripting XSS vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/. This vulnerability can be exploited by a privileged user and may target users with higher privileges. The vendor was notified early about this...
CVE-2025-10018
QuickCMS is vulnerable to multiple Stored XSS in language editor functionality languages. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed on every page. By default admin user is not able to add JavaScript into the website. Th...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-406106)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-406106 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacrubind Syzbot is still reporting quite an old issu...
EUVD-2025-25274
Malicious code in bioql PyPI...