nse-scripts

Here are 6 public repositories matching this topic...

vulnersCom / nmap-vulners

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

security lua nmap infosec pentesting fingerprinting cve cpe vulnerability-detection nse network-scanner exploit-database cvss security-tools nmap-scripts vulnerability-scanner vulners nse-scripts

Updated Aug 19, 2026
Lua

SagarBiswas-MultiHAT / NmapScanningTool-V1

Star

An interactive Python wrapper around Nmap that simplifies running common network scans. It prompts for targets, ports, and scan types, supports SYN, aggressive, OS detection, and NSE vulnerability scans, checks for privileges and Nmap availability, and can filter results to show only open ports.

python cybersecurity nmap penetration-testing python-cli offensive-security network-scanning ethical-hacking network-security port-scanning security-tools nse-scripts nmap-scanning

Updated Mar 2, 2026
Python

keraattin / CVE-2026-34197

Star

CVE-2026-34197: Apache ActiveMQ Classic RCE via Jolokia API (CVSS 8.8). Python & Nmap NSE detection scripts. A 13-year-old vulnerability allows remote code execution through the addNetworkConnector MBean operation. Unauthenticated on versions 6.0.0 to 6.1.1. Fixed in 5.19.4 and 6.2.3.

activemq cybersecurity jolokia vulnerability-detection nmap-scripts apache-activemq remote-code-execution nse-scripts cve-2026-34197

Updated Apr 14, 2026
Python

keraattin / CVE-2026-39987

Star

CVE-2026-39987: Marimo Python Notebook Pre-Auth RCE (CVSS 9.3). Python & Nmap NSE detection scripts. Missing authentication on /terminal/ws WebSocket endpoint gives attackers a full PTY shell without any credentials. Exploited in the wild within 10 hours of disclosure. Fixed in Marimo 0.23.0.

websocket cybersecurity vulnerability-detection python-notebook nmap-scripts remote-code-execution nse-scripts marimo cve-2026-39987 pre-auth-rce

Updated Apr 15, 2026
Python

keraattin / CVE-2026-35616

Star

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass (CVSS 9.1, CISA KEV). Python & Nmap NSE detection scripts with full technical breakdown. One forged HTTP header bypasses authentication on FortiClient EMS 7.4.5–7.4.6, granting full admin API access to all managed endpoints.

cybersecurity vulnerability-detection fortinet nmap-scripts authentication-bypass vulnerability-research forticlient nse-scripts cve-2026-35616 forticlient-ems

Updated Apr 13, 2026
Python

keraattin / CVE-2026-35517

Star

CVE-2026-35517 Pi-hole FTLDNS Remote Code Execution via Newline Injection (CVSS 8.8). Python & Nmap NSE detection scripts with full technical breakdown. A newline character in the dns.upstreams parameter gives authenticated attackers command execution on the host. Five related injection vectors all patched in FTL v6.6.

pi-hole dnsmasq cybersecurity rce vulnerability-detection nmap-scripts pihole remote-code-execution crlf-injection nse-scripts cve-2026-35517 ftldns newline-injection

Updated Apr 14, 2026
Python

Improve this page

Add a description, image, and links to the nse-scripts topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the nse-scripts topic, visit your repo's landing page and select "manage topics."

Learn more