6178 matches found
Exploit-Medium-CVE-2021-41184
Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS dans l'option of de l'utilitaire .position 1. jQuery ui version v1.12.1 vulnérable 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Preuve de...
CVE-2021-3156-SCRIPT
CVE-2021-3156-SCRIPT git clone https://github.com/binw2018/CVE-2021-3156-SCRIPT.git && cd CVE-2021-3156-SCRIPT && sh Script.sh...
PyCk
PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...
scanless
⚠️ Я больше не поддерживаю scanless с августа 2023 года. ⚠️ scanless Это утилита командной строки и библиотека на Python для использования веб-сайтов, которые могут выполнять сканирование портов от вашего имени. Поддерживаемые онлайн-сканеры портов ipfingerprints spiderip standingtech viewdns...
scanless
⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up: $ pip...
bst
Boîte à outils de chaînes binaires Résumé La Binary String Toolkit, ou BST en abrégé, est un utilitaire assez simple pour convertir des chaînes binaires en divers formats adaptés à l'inclusion dans des codes sources, comme ceux utilisés pour développer des exploits et des preuves de concept dans ...
SiteBroker
SiteBroker A cross-platform python based utility for information gathering and penetration automation! Output Sitebroker's Full Output Easy way Docker Image You can simply run this docker image to test SiteBroker without installing python packages system-wide or in a virtualenv. docker build -t...
zip_smuggling
zipsmuggling Эта утилита на Python создаёт zip-файлы, содержащие дополнительные данные, встроенные в структуру файла. Эти дополнительные данные не видны/не отображаются при просмотре или распаковке zip-архива, но могут быть извлечены с помощью PowerShell через файл ярлыка Windows LNK внутри...
Hardcoded Admin Credentials For Cisco Smart Licensing Utility API
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...
pfSense - Arbitrary File Write
diagroutes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection...
EUVD-2009-5121
ContentKeeper Web Appliance now maintained by Impero Software versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as t...
check-cve-2019-19781
check-cve-2019-19781 🔎🐞 Cet utilitaire détermine si un hôte semble vulnérable à la CVE-2019-19781. Exigences Python versions 3.6 et supérieures. Notez que Python 2 n'est pas supporté. Installation Depuis une version publiée : pip install...
pyshellshock
.. CVE-2014-6271: https://vulners.com/cve/CVE-2014-6271 ============ pyshellshock Bibliothèque et utilitaire Python pour CVE-2014-6271...
CVE-2026-104002
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
gvcidrv64
привет, хакеры. GVCIDrv64.sys — это подписанный драйвер ядра, который поставляется с утилитой BIOS от Gigabyte. Он создаёт \.\GVCIDrv64 без дескриптора безопасности, поэтому любой локальный пользователь может его открыть — без прав администратора, без UAC. Он предоставляет 3 IOCTL с полным...
GTFOBLookup
GTFOBLookup Офлайн-утилита командной строки для поиска по GTFOBins, LOLBAS, WADComs и HijackLibs. Файлы .gitignore : файл .gitignore gtfoblookup.1 : man-страница Linux для GTFOBLookup gtfoblookup.py : утилита GTFOBLookup LICENSE.md : файл лицензии README.md : этот файл requirements.txt : список...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-104002
The data masking utility in Powertools for AWS Lambda (Python) is vulnerable to a fail-open error handling issue in versions prior to 3.35.0 . This flaw allows actors to read sensitive field values that the application intended to mask because the system continues to operate rather than denying a...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...