34 matches found
CVE-2020-8193-Citrix-Scanner
CVE-2020-8193-Citrix-Scanner CVE-2020-8193 스캔 - 인증 우회Auth Bypass 확인 https://vulners.com/cve/CVE-2020-8193 참고 문서: https://research.nccgroup.com/2020/07/10/rift-citrix-adc-vulnerabilities-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-intelligence/ https://dmaasland.github.io/posts/citrix.html 면책 조항...
mass_cve-2021-41773
masscve-2021-41773 MASS CVE-2021-41773 스크린샷 사용법 ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool 참고 ! 결과는 vuln.txt에 자동으로 저장됩니다. 일반 디렉토리를 https://github.com/justakazh/masscve-2021-41773/blob/4579bdbbda666b47b40116518d3fc5729574a2f8/cve-2021-41773.pyL49 에 추가할 수 있습니다. 참고 자...
CVE-2020-7799
cve-2020-7799 cve-2020-7799 일괄 탐지 같은 디렉터리에 text.txt 파일을 추가하세요 파일 내 URL 형식은 다음과 같습니다: www.baidu.com 132.231.132.132 133.12.122.13:8080 실행: python3 cve-2020-7799.py 주의: 본 프로젝트의 모든 자원을 불법적인 테스트에 사용하는 것을 금지합니다!...
CVE-2024-39199
CVE-2024-39199 / CNVD-2024-31551 url.txt에 URL을 작성하고 100000CMS-POC.py를 실행하여 확인하세요...
phishurl-list
JPCERT/CC의 피싱 URL 데이터셋 컬럼 세부 정보 date: JPCERT/CC가 확인한 날짜 URL: 피싱 사이트의 전체 URL description: 위조된 브랜드에 대한 정보 통계 페이지 https://jpcertcc.github.io/phishurl-list/...
CVE-2021-41773
CVE-2021-41773 Apache 경로 탐색 CVE-2021-41773을 URL 목록에서 테스트하는 빠른 Python 도구 사용법 :- live urls 파일을 만들고 "-l" 플래그를 사용하세요 python3 apachepathtraversal.py -l urls-list.txt...
CVE-2020-3187-Scanlist
CVE-2020-3187-Scanlist - Cisco 일괄 스캐닝 사이트. 고지: 이 도구의 사용 또는 어떠한 손해에 대해서도 책임지지 않습니다. 불법적인 목적으로 사용하지 마십시오. 이 도구는 여러 Cisco 인스턴스에서 이 취약점 확인을 자동화하기 위해 승인된 자산을 스캔하도록 설계되었습니다. 설치: git clone https://github.com/sunyyer/CVE-2020-3187-Scanlist.git chmod +x CVE-2020-3187.py https://xx.xx 형식의 URL을 포함한 urls.txt...
ms15-034-Scan
ms15-034-scan python3 ms15-034/CVE-2015-1635 취약점 대량 스캔 사용법 python3 ms-socket.py url.txt 자신의 자산을 url.txt에 추가하세요 result.txt로 출력 http:// 및 https:// 제거 기능 미포함 메모장에서 직접 ctrl+h로 바꾸세요...
CVE-2025-66459
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnerability can be triggered when a user submits a list of URLs to capture, one of them contains a HTML element, and the capture fails. Then, t...
CVE-2019-18370
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
SUSE CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors...
RHSA-2025:0300
creationtimestamp| type| source ---|---|--- 2024-11-16 15:59:00+00:00| seen| https://bugzilla.redhat.com/showbug.cgi?id=2328846 2025-01-14 08:38:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113825801178667187 2025-01-14 08:38:10+00:00| seen|...
Improper Validation of Unsafe Equivalence in Input
Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the srcset attribute, which allows bypassing the imgSrcSanitizationTrustedUrlList allowlist. An attacke...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Owncloud Graph_Api
CVE-2023-49103 PoC for the CVE-2023-49103 Overview This Py...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...
Secretx - Extracting API Keys And Secrets By Requesting Each URL At The Your List
Extracting api keys and secrets by requesting each url at the your list. Installation python3 -m pip install -r requirements.txt Usage python3 secretx.py --list urlList.txt --threads 15 optional arguments: --help --colorless Credits Thanks to @m4ll0k for patterns and @choudhary1337 inpsiring for...
CORStest - A Simple CORS Misconfiguration Scanner
A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...
Command injection
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
