551 matches found
cups-script-final-project
功能说明 針對CVE-2025-58060的兩階段檢測工具,Common UNIX Printing System CUPS中的認證繞過漏洞。該工具不僅依賴版本號,還將基於Banner的版本檢查與主動認證繞過探測相結合。即使Server頭部截斷了修補版本,也能幫助確認真實的漏洞狀態。 第一階段 — 版本檢查 讀取CUPS Web介面(埠631)的Server: HTTP頭部,並將檢測到的版本與修補版本閾值2, 4, 13進行比較。如果Banner只報告CUPS/2.4(被截斷),工具會標記此情況並轉至第二階段。 第二階段 — 主動認證繞過探測 向/admin/發送精心構造的HTTP...
xz-backdoor-CVE-2024-3094-Check
xz-backdoor-CVE-2024-3094-Check 检查您安装的 xz-utils 版本是否易受 CVE-2024-3094 后门影响。此检查适用于 Kali Linux 或其他基于 Debian 的安装。 使用方法 root@kitploit: git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd xz-backdoor-CVE-2024-3094-Check chmod +x checkxzutilsCVE-2024-3094.sh...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-231-02)
The version of mozilla-thunderbird installed on the remote host is prior to 140.14.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-231-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...
Detect-CVE-2024-0762
CVE-2024-0762 检测与恶意软件分析脚本 概述 本脚本旨在检测 UEFI 固件版本并评估其是否存在 CVE-2024-0762 相关漏洞。此外,它集成了 VirusTotal API,用于分析文件中的恶意软件,提供全面的安全洞察: 功能 UEFI 固件检测 :从 Windows 和 Linux 系统中检索 UEFI 固件版本。 漏洞评估 :检查检测到的固件版本是否存在 CVE-2024-0762 漏洞。 VirusTotal 集成 :将文件提交至 VirusTotal 进行恶意软件分析,并获取详细报告。 要求 Python 3.x :确保已安装 Python 3。 Reques...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099466)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099466 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client...
Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...
GitLab 17.6 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-8667)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19... CVE-2026-8667 Note that Nessus has not tested for this issue but has instead relied only on the...
GitLab 17.7 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-18244)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2026-18244 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
EUVD-2026-40980
In the Linux kernel, the following vulnerability has been resolved: rust: arm64: set uwtable llvm module flag for CONFIGUNWINDTABLES Due to a rustc bug 1 the -Cforce-unwind-tables=y flag only emits the uwtable annotation for functions, but not for the module. This means that compiler-generated...
PT-2026-54814
In the Linux kernel, the following vulnerability has been resolved: rust: arm64: set uwtable llvm module flag for CONFIG UNWIND TABLES Due to a rustc bug 1 the -Cforce-unwind-tables=y flag only emits the uwtable annotation for functions, but not for the module. This means that compiler-generated...
CVE-2026-46607
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...
CVE-2026-46607
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...
CVE-2026-46310
In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unloading the module on gen 4, we hit a NULL pointer dereference. This is caused by the cleanup code calling vsp1drmcleanup where it should be calling...
Exploit for Authentication Bypass by Primary Weakness in Mantisbt
CVE-2026-30849.ts — usage This TypeScript script performs a c...
Exploit for CVE-2024-34070
CVE-2024-34070 Froxlor PoC Python proof of concept for CVE-20...
Exploit for CVE-2026-22557
CVE-2026-22557 Vulnerability Assessment Tool Safely detect wh...
CVE-2026-9396
A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be executed remotely. A...
CVE-2026-9396 Besen BS20 EV Charging Station Firmware Version Check ui layer
A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be executed remotely. A...
EUVD-2026-31552
A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be executed remotely. A...
CVE-2026-9396 Besen BS20 EV Charging Station Firmware Version Check ui layer
A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be executed remotely. A...