48 matches found
nmap-vulners
nmap-vulners 将 nmap 服务扫描转化为按风险排序的 CVE、漏洞利用及野外攻击目标列表。 一个 NSE 脚本，它获取 nmap 已识别的软件信息，向 Vulners 数据库查询已知情报，并将结果打印在扫描报告中——按实际可利用性从高到低排列。 对公开可扫描主机的真实扫描。先无密钥，再有密钥，最后是 Web 端口：nmap 的 -sV 报告了 Coyote 横幅，扫描识别出其背后的 Tomcat 和 jQuery。 功能说明 对于每个开放端口，它会查询 nmap 识别的软件信息——即 -sV 生成的 CPE——并打印 Vulners...
zabbix-threat-control
Zabbix Threat Control ztc 将您已经在运行的 Zabbix 变成漏洞管理控制台。 ztc 通过标准的 zabbix-agent2 （无需部署额外代理）读取每台主机的软件清单，对照 Vulners 进行审计，并将按主机评分的发现结果 ——问题、仪表盘和 CVSS 图表——推回 Zabbix。一个静态二进制文件，一条命令即可安装。 为什么选择 ztc 无需新代理，无 RCE 风险。 主机通过标准 zabbix-agent2 的 UserParameter 上报清单。修复只通过一个白名单键 + 受限 sudoers 执行——绝不使用任意的 system.run。 支持...
burp-vulners-scanner
burp-vulners-scanner 描述 基于 Vulners.com 漏洞数据库 API 的 Burp Suite 扫描器插件 在 HTTP 响应中搜索指纹（灵感来源于 "Software Version Reporter" 插件），并检查 Vulners.com 漏洞数据库中的版本 实验性 在 Vulners.com 中检查唯一 URL，查找此类路径的利用代码 如果 Vulners 插件检测到易受攻击的软件，它将向你展示 CVE、安全公告，甚至可用的利用代码！ 如何使用 要求 Burp Suite - 专业版 Java 1.8 Maven 安装 1. 克隆仓库 2. 在命令行中...
CVE-2026-53264
CVE-2026-53264 Descripción: https://vulners.com/cve/CVE-2026-53264 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Sencillo Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker...
salt-scanner
salt-scanner 基于Vulners Audit API和Salt Open的Linux漏洞扫描器，支持Slack通知和JIRA集成。 功能特性 Slack通知和报告上传 JIRA集成 OpsGenie集成 环境要求 Salt Open 2016.11.x salt-master, salt-minion¹ Python 2.7 salt（可能需要安装gcc、gcc-c++、python开发包） slackclient jira opsgenie-sdk 注意：Salt Master和Minion版本应匹配。Salt-Scanner支持Salt...
vulners-scanner
vulners-scanner 描述 基于主机的漏洞扫描器的概念验证（PoC），使用 vulners.com API。检测操作系统，收集已安装的软件包并检查其中的漏洞。 支持的操作系统 目前支持收集这些操作系统的软件包： 基于 Debian（debian、kali、ubuntu） 基于 Rhel（redhat、centos、fedora） Python 版本 懒惰版和高级版已在 python2.6、python2.7、python3.5 上测试。如果发现任何错误，请随时提交 issue Docker 支持 实验性支持检测运行中的 Docker 容器中的漏洞（仅限高级脚本）。需要将...
flan
Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...
vulners-scanner
vulners-scanner 描述 基于主机的漏洞扫描器的PoC，使用vulners.com API。检测操作系统，收集已安装的包并检查其中的漏洞。 支持的操作系统 目前支持收集这些操作系统的包： 基于Debian（debian, kali, ubuntu） 基于Rhel（redhat, centos, fedora） Python版本 Lazy和Advanced版本已在python2.6、python2.7、python3.5上测试。如果发现任何错误，请随时打开issue Docker支持...
The Vulners team has released an updated version Getsploit
The Vulners team has released an updated version ofGetsploit. The utility allows you to search for public exploits in the Vulners.com database. It supports both an online mode search queries are executed on the Vulners server and a fully offline mode exploit data from Vulners is downloaded to a...
getsploit v3.0.1
Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index. Get an API key · Vulners search · Changelog · Architecture · Security policy !Getsploit searching online, building a local FTS5 index, then searching and mirroring...
@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.33), @hublo/sentinel (>=1.1.0-alpha.3, <=1.2.0-alpha.18) +39 more potentially affected by CVE-2026-71476 via nx (>=23.0.0, <=23.0.1)
nx NPM version =23.0.0, =1.0.0-rc.24, =1.1.0-alpha.3, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.1 and more Source cves: CVE-2026-71476 Source...
@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.13)
@ccfly/setup-darwin-x64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +46 more potentially affected by CVE-2025-59414 via nuxt (>=3.6.2, <=3.18.1)
nuxt NPM version =3.6.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...
🔍 Vulners Lookup – augmented CVE reality
Vulners Lookup – augmented CVE reality. Yesterday, VulnCheck unveiled a prototype Chrome/Chromium plugin that highlights CVE identifiers on any website and shows a popup with vulnerability details, including whether the vulnerability is in the VulnCheck KEV an extended CISA KEV. The Vulners team...
ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)
ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-11879...
Exploit for CVE-2023-6444
CVE-202306444-POC Proof of concept...
KLA50772 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-33156 Related products Windows-Defender CVE list CVE-2023-33156 high KB list Solution Install necessary updates from the KB...
Microsoft Patch Tuesday February 2023: Win Graphics RCE, Edge RCE, Publisher SFB, CLFS EoP, Exchange RCEs, Word RCE, HoloLens1
Hello everyone! This episode will be about Microsoft Patch Tuesday for February 2023, including vulnerabilities that were added between January and February Patch Tuesdays. Alternative video link for Russia: This month I decided to change the format a bit. Now I share my impression of Microsoft...
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
Hello everyone! Great news for my open source Scanvus project! You can now perform vulnerability checks on Linux hosts and docker images not only using the Vulners.com API, but also with the Vulns.io VM API. Its especially nice that all the code to support the new API was written and contributed ...