1353 matches found
CVE-2024-6387-Checker
CVE-2024-6387-Checker Questo strumento scansiona la tua rete alla ricerca di host che eseguono versioni vulnerabili di OpenSSH CVE-2024-6387. Può gestire IP singoli, più IP, intervalli CIDR e file CSV con porte personalizzate. Requisiti Installa le librerie richieste usando pip: root@kitploit: pi...
CVE-2025-26399
CVE-2025-26399 Como funciona este método de deteção? Este script deteta instâncias do SolarWinds Web Help Desk vulneráveis ao CVE-2025-26399 ao solicitar a página de login do Helpdesk, confirmar identificadores do produto na resposta, extrair o token de compilação incorporado como uma string de...
nextjs-react2shell-detect
Chrome extension che esegue next.version localmente e inietta un popover di avviso se il sito esegue una versione di next vulnerabile a react2shell Questo è un progetto di estensione Plasmo inizializzato con plasmo init. Per Iniziare Prima di tutto, esegui il server di sviluppo: root@kitploit: bu...
telerik-scanner-cve-2017-9248
Scanner per la Vulnerabilità Telerik CVE-2017-9248 V2.0 Uno scanner Python completo che scopre endpoint Telerik e testa la vulnerabilità crittografica CVE-2017-9248 con funzionalità di scansione bulk di livello enterprise. Caratteristiche Modalità Rapida e Scoperta : Test di un singolo percorso o...
CVE-2022-41741-742-Nginx-Vulnerability-Scanner
🛡️ Nginx Vulnerability Scanner Sviluppato da m10sec. Questo script rileva automaticamente la versione di Nginx su un server remoto e valuta se è vulnerabile a falle di sicurezza note, in particolare: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corruzione della memoria in...
Apache-Hunter
ApacheHunter - Scanner Avanzato per Server Apache Sviluppato da Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter è un potente scanner progettato per rilevare server Apache, identificare versioni e verificare la presenza della vulnerabilità CVE-2024-22393 Pixel Flood nelle...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
GHSA-Q6CQ-MHR2-JMR5 Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
The HAProxyMessageDecoder in netty's codec-haproxy module performs protocol version detection by reading the 13th byte of the inbound stream as a signed Java byte and widening it to int without masking. When an attacker sends a PROXY protocol v2 binary prefix 0D 0A 0D 0A 00 0D 0A 51 55 49 54 0A...
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
The HAProxyMessageDecoder in netty's codec-haproxy module performs protocol version detection by reading the 13th byte of the inbound stream as a signed Java byte and widening it to int without masking. When an attacker sends a PROXY protocol v2 binary prefix 0D 0A 0D 0A 00 0D 0A 51 55 49 54 0A...
CVE-2026-55851
CVE-2026-55851 affects Netty (codec-haproxy) where the HAProxyMessageDecoder reads the 13th byte as a signed value and sign-extends to int, causing a PROXY v2 prefix with 0xFF to collide with the decoder’s need-more-data sentinel. This leads to unbounded cumulation and potential memory exhaustion...
CVE-2026-55851 Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to but not including 4.2.16.Final, and 4.1.0.Final up to but not including 4.1.135, the HAProxyMessageDecoder in Netty's codec-haproxy module performs protocol version detection by...
Exploit for CVE-2026-42945
CVE-2026-42945 NGINX Rift — defensive scanner Organizations...
Endian Firewall Detection Consolidation
Consolidation of Endian Firewall detections. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...
Camaleon CMS 2.9.1 Automated Admin Login, Version Detection, and Profile Update Script
This is a version detection and profile updating script for Camaleon CMS. It does not exploit any issue but can be useful for security testing to see if a vulnerable version is in use...
📄 SPIP CMS Analysis Scanner Script
This is an exploitation tool designed for websites running the SPIP CMS versions 5.4.0 through 5.11.0. The tool performs automated detection and enumeration of SPIP installations, identifies installed plugins, attempts to determine plugin versions, and searches for forms using the saisies plugin...
Exploit for CVE-2026-27944
Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector ht...
📄 Splunk Enterprise 9.1.5 / 9.2.2 Vulnerability Scanner
This PHP script is a defensive vulnerability checker for CVE-2024-36985 affecting Splunk Enterprise. It authenticates to a Splunk instance using provided credentials, retrieves the installed Splunk version, and determines whether it falls within the vulnerable ranges. The script then enumerates...
Exploit for Missing Authorization in Themepunch Slider_Revolution
CVE-2024-34444 - Slider Revolution Missing Authorization Scann...
📄 WordPress Wux Blog Editor 3.0.0 Vulnerability Scanner
This Metasploit auxiliary module scans WordPress sites for the External Post Editor plugin and checks for the unauthenticated file upload vulnerability that exists in version 3.0.0...