CopyFail-Scanner-CVE-2026-31431

CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner는 CopyFileCVE-2026-31431 취약점을 식별할 수 있는 도구입니다. 시스템을 열거합니다 취약점 노출 여부를 평가합니다 상태취약/비취약를 표시합니다 배포판에 따라 안전한 업데이트를 제안하고, 선택적으로 실행합니다 python3 흐름 ⚠️ 중요한 기술 참고 사항 보편적인 "정확한 취약 커널"은 존재하지 않습니다. 그 이유는: 각 배포판이 패치를 백포트하기 때문입니다 버전 번호가 실제 취약점 여부를 항상 반영하지는 않습니다 따라서 이...

GHSA-2R5M-76WX-56GX vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

CVE-2026-45360 vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: node-problem-detector, percona-server-mongodb-operator, tigera-operator, net-kourier, certificate-transparency, lvm-driver, grafana-mimir, gitsign, nuclei, zarf, spire-controller-manager, terraform-provider-kubernetes, grpc-health-probe, step-kms-plugin,...

shocknaww

shocknaww Простой скрипт для проверки CVE-2014-6271 Пример использования root@kitploit: ./shocknaww.py http://foo.bar/cgi-bin/foo Пример уязвимого окружения Из родительской директории выполните следующее. root@kitploit: python -m CGIHTTPServer Теперь используйте shocknaww против вашего локального...

notepad_CVE_2026_20841

이 저장소에는 README가 없습니다...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

ntlm-scanner

Новинка! Exploit Scan для CVE-2020-1472 ZeroLogon Сканируйте контроллеры домена в своей сети для обнаружения фактической эксплуатации CVE-2020-1472 Примеры: root@kitploit: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target Инструмент работает...

Email-Vulnerability-Checker

Email Vulnerability Checker v2.1 Проверьте, уязвим ли домен для подмены с помощью Email-vulnerablity-checker Возможности версии 2.1 Добавлена поддержка сохранения вывода в файл с помощью флага -o Добавлено больше проверок, которые точно сообщат статус уязвимости. Полностью обновлён код с...

cve-2020-29070

CVE-2020-29070 Análisis de CVE-2020-29070...

Oracle Weblogic - Server-Side Request Forgery

An unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. id: CVE-2014-4210 info: name: Oracle Weblogic - Server-Side Request Forgery author:...

LearnPress < 4.2.6.8.1 - Information Disclosure

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by incorrect implementation of getitemspermissionscheck function in all versions up to 4.2.6.8, letting unauthenticated attackers extract user emails and basic information. id: CVE-2024-5483 info: name: LearnPress...

Redash Setup Configuration - Default Secrets Disclosure

Redash Setup Configuration is vulnerable to default secrets disclosure Insecure Default Initialization of Resource. If an admin sets up Redash versions =10.0 and prior without explicitly specifying the REDASHCOOKIESECRET or REDASHSECRETKEY environment variables, a default value is used for both...

MagnusBilling Alarm Module - Cross-Site Scripting

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling Alarm Module modules allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php.This issue affects MagnusBilling-...

LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads. id:...

WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvividuploadimportfiles' function in all versions up to, and including, 0.9.116. id: CVE-2025-5961 info: name: WordPress WPvivid...

DedeCMS 5.7 SP2 - Cross-Site Scripting

DedeCMS 5.7 SP2 is vulnerable to cross-site scripting via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATHINFO to /member/index.php, /member/pm.php,...

Online Security Guards Hiring System - Cross-Site Scripting

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. id: CVE-2023-0527 info: name: Online Security Guards Hiring System - Cross-Site Scripting author:...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=. id: CVE-2022-31975 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...