24 matches found
cve-2019-16097
cve-2019-16097 1.在urls.txt中添加你要检测的url 2.python3环境下运行cve-2019-16097脚本 python3 cve-2019-16097.py 3.批量检测完成后再results中查看成功写入账号的url。...
CVE-2024-0012-poc
更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 代码执行时因网络环境不同可能会遇到超时情况，自行调整timeout时间即可 批量检测： python poc.py -f url.txt 单个检测： python poc.py -u https://your-ip...
Malicious-URL-Detection-Open-Source
Malicious-URL-Detection-Open-Source 我们收集了现有的用于恶意 URL 检测的开源代码。...
CanaryTokenScanner
CanaryToken / HoneyToken 扫描器 检测 Microsoft Office 文档 和 PDF 中的可疑 URL（包括 CanaryTokens）。 支持的格式： Office Open XML: .docx, .xlsx, .pptx .pdf .zip （通用归档） 为什么存在这个工具 CanaryTokens 和 HoneyTokens（以及其他跟踪或恶意 URL）通常嵌入文档中，用于在文件被打开或外部资源被获取时发出信号。此工具仅执行静态检查 ：它读取文件内容并查找嵌入的 URL，而无需在 Office/Acrobat 中打开文档 ，也不发起任何网络请求。...
CVE-2021-37580
CVE-2021-37580 支持单独和批量验证CVE-2021-37580漏洞 单个url检测： 文件批量验证：...
CVE-2022-22954-POC
VMware-CVE-2022-22954-POC 声明:该POC仅供于学习专用，禁止一切违法操作，如果进行恶意破坏与本人无关！！！ —、批量检测脚本： 用法： root@kitploit: python vm-2022-22954-POC.py url.txt 二、单个url检测： root@kitploit: python vm-2022-22954-POC.py http://xx.xx.xx.xx 脚本执行成功，若存在漏洞则会在本地生成一个succ.txt文档并存储其中...
CVE-2025-30208
CVE-2025-30208 This repository contains a Bash script that automates the process of detecting and scanning CVE-2025-30208 from a list of URLs. The script integrates Discord notifications for tracking execution status. Features Runs detectvite.py to identify Vite servers from a list of URLs...
CVE-2024-0352
Badge Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni qui Se non riesci a capirlo, probabilmente non dovresti usare questo strumento Installa tramite pip root@kitploit: pip install CVE-2024-0352 Esegui il comando seguente per verificare CVE-2024-0352 -h Configurazioni 2. Ci siamo...
CVE-2026-27779
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
EUVD-2026-41637
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
flowintel 安全漏洞
Flowintel is an open-source security analyst case and task management platform developed by flowintel. Versions of FlowIntel 3.3.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the external reference URL detection function in the app/case/task.py file, which has a...
A Graph-Attentive LSTM Model for Malicious URL Detection
Malicious URLs pose significant security risks as they facilitate phishing attacks, distribute malware, and empower attackers to deface websites. Blacklist detection methods fail to identify new or obfuscated URLs because they depend on pre-existing patterns. This work presents a hybrid deep...
URL2Graph++: Unified Semantic-Structural-Character Learning for Malicious URL Detection
Malicious URL detection remains a major challenge in cybersecurity, primarily due to two factors: 1 the exponential growth of the Internet has led to an immense diversity of URLs, making generalized detection increasingly difficult; and 2 attackers are increasingly employing sophisticated...
From past to Present: a Survey of Malicious URL Detection Techniques, Datasets and Code Repositories
Malicious URLs persistently threaten the cybersecurity ecosystem, by either deceiving users into divulging private data or distributing harmful payloads to infiltrate host systems. Gaining timely insights into the current state of this ongoing battle holds significant importance. However, existin...
CanaryTokenScanner - Script Designed To Proactively Identify Canary Tokens Within Microsoft Office Documents And Acrobat Reader PDF (docx, xlsx, pptx, pdf)
Detecting Canary Tokens and Suspicious URLs inMicrosoft Office, Acrobat Reader PDF and Zip Files Introduction In the dynamic realm of cybersecurity, vigilance and proactive defense are key. Malicious actors often leverage Microsoft Office files and Zip archives, embedding covert URLs or macros to...
Exploit for Path Traversal in Stagil Stagil_Navigation
POC script for the vulnerability exposure in the Jira plugin S...
Exploit for Code Injection in Vmware Identity_Manager
VMware-CVE-2022-22954-POC Note: This POC is for educatio...
openSUSE Security Update : nextcloud (openSUSE-2019-640)
This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...
atlanticcoastalarm.com XSS vulnerability
Open Bug Bounty ID: OBB-701603 Description| Value ---|--- Affected Website:| atlanticcoastalarm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...