Skip to content
#

nse-scripts

Star

Here are 4 public repositories matching this topic...

keraattin / CVE-2026-35616

Star 1

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass (CVSS 9.1, CISA KEV). Python & Nmap NSE detection scripts with full technical breakdown. One forged HTTP header bypasses authentication on FortiClient EMS 7.4.5–7.4.6, granting full admin API access to all managed endpoints.

cybersecurity vulnerability-detection fortinet nmap-scripts authentication-bypass vulnerability-research forticlient nse-scripts cve-2026-35616 forticlient-ems
  • Updated Apr 13, 2026
  • Python

keraattin / CVE-2026-34197

Star 1

CVE-2026-34197: Apache ActiveMQ Classic RCE via Jolokia API (CVSS 8.8). Python & Nmap NSE detection scripts. A 13-year-old vulnerability allows remote code execution through the addNetworkConnector MBean operation. Unauthenticated on versions 6.0.0 to 6.1.1. Fixed in 5.19.4 and 6.2.3.

activemq cybersecurity jolokia vulnerability-detection nmap-scripts apache-activemq remote-code-execution nse-scripts cve-2026-34197
  • Updated Apr 14, 2026
  • Python

keraattin / CVE-2026-39987

Star 0

CVE-2026-39987: Marimo Python Notebook Pre-Auth RCE (CVSS 9.3). Python & Nmap NSE detection scripts. Missing authentication on /terminal/ws WebSocket endpoint gives attackers a full PTY shell without any credentials. Exploited in the wild within 10 hours of disclosure. Fixed in Marimo 0.23.0.

websocket cybersecurity vulnerability-detection python-notebook nmap-scripts remote-code-execution nse-scripts marimo cve-2026-39987 pre-auth-rce
  • Updated Apr 15, 2026
  • Python

keraattin / CVE-2026-35517

Star 0

CVE-2026-35517 Pi-hole FTLDNS Remote Code Execution via Newline Injection (CVSS 8.8). Python & Nmap NSE detection scripts with full technical breakdown. A newline character in the dns.upstreams parameter gives authenticated attackers command execution on the host. Five related injection vectors all patched in FTL v6.6.

pi-hole dnsmasq cybersecurity rce vulnerability-detection nmap-scripts pihole remote-code-execution crlf-injection nse-scripts cve-2026-35517 ftldns newline-injection
  • Updated Apr 14, 2026
  • Python

Improve this page

Add a description, image, and links to the nse-scripts topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the nse-scripts topic, visit your repo's landing page and select "manage topics."

Learn more