34 matches found
ms15-034-Scan
ms15-034-scan python3 Массовое сканирование уязвимости ms15-034/CVE-2015-1635 Использование root@kitploit: python3 ms-socket.py url.txt Добавьте активы в url.txt самостоятельно Вывод result.txt Не удаляет http:// и https:// Замените вручную в блокноте с помощью ctrl+h...
CVE-2020-7799
cve-2020-7799 Détection en masse de cve-2020-7799 Ajoutez un fichier text.txt dans le même répertoire Le format des URL dans le fichier est le suivant : www.baidu.com 132.231.132.132 133.12.122.13:8080 Exécutez python3 cve-2020-7799.py Attention : il est interdit d'utiliser toutes les ressources ...
phishurl-list
Набор данных URL-адресов фишинга от JPCERT/CC Описание столбцов date: Дата подтверждения JPCERT/CC URL: Полный URL-адрес фишингового сайта description: Информация о подделываемом бренде Страница статистики https://jpcertcc.github.io/phishurl-list/...
mass_cve-2021-41773
masscve-2021-41773 MASS CVE-2021-41773 스크린샷 사용법 ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool 참고 ! 결과는 vuln.txt에 자동으로 저장됩니다. 일반 디렉토리를 https://github.com/justakazh/masscve-2021-41773/blob/4579bdbbda666b47b40116518d3fc5729574a2f8/cve-2021-41773.pyL49 에 추가할 수 있습니다. 참고 자...
CVE-2021-41773
CVE-2021-41773 Быстрый инструмент на Python для проверки Apache path traversal CVE-2021-41773 в списке URL Использование :- создайте файл со списком активных URL и используйте флаг "-l" python3 apachepathtraversal.py -l urls-list.txt...
CVE-2020-3187-Scanlist
CVE-2020-3187-Scanlist - Cisco 일괄 스캐닝 사이트. 고지: 이 도구의 사용 또는 어떠한 손해에 대해서도 책임지지 않습니다. 불법적인 목적으로 사용하지 마십시오. 이 도구는 여러 Cisco 인스턴스에서 이 취약점 확인을 자동화하기 위해 승인된 자산을 스캔하도록 설계되었습니다. 설치: git clone https://github.com/sunyyer/CVE-2020-3187-Scanlist.git chmod +x CVE-2020-3187.py https://xx.xx 형식의 URL을 포함한 urls.txt...
CVE-2020-8193-Citrix-Scanner
CVE-2020-8193-Citrix-Scanner Сканирование CVE-2020-8193 - проверка обхода аутентификации https://vulners.com/cve/CVE-2020-8193 Поддерживающие документы: https://research.nccgroup.com/2020/07/10/rift-citrix-adc-vulnerabilities-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-intelligence/...
CVE-2025-66459
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnerability can be triggered when a user submits a list of URLs to capture, one of them contains a HTML element, and the capture fails. Then, t...
CVE-2019-18370
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
SUSE CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors...
RHSA-2025:0300
creationtimestamp| type| source ---|---|--- 2024-11-16 15:59:00+00:00| seen| https://bugzilla.redhat.com/showbug.cgi?id=2328846 2025-01-14 08:38:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113825801178667187 2025-01-14 08:38:10+00:00| seen|...
Improper Validation of Unsafe Equivalence in Input
Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the srcset attribute, which allows bypassing the imgSrcSanitizationTrustedUrlList allowlist. An attacke...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Owncloud Graph_Api
CVE-2023-49103 PoC for the CVE-2023-49103 Overview This Py...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...
Secretx - Extracting API Keys And Secrets By Requesting Each URL At The Your List
Extracting api keys and secrets by requesting each url at the your list. Installation python3 -m pip install -r requirements.txt Usage python3 secretx.py --list urlList.txt --threads 15 optional arguments: --help --colorless Credits Thanks to @m4ll0k for patterns and @choudhary1337 inpsiring for...
CORStest - A Simple CORS Misconfiguration Scanner
A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...
Command injection
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
