30879 matches found
Stevos-AI-Blocklist
Stevo's AI Blocklist A filter list for uBlock Origin and AdGuard that hides specific website features which use Generative AI and content labeled as AI-generated. Available for PC/Linux Firefox, Chrome, Edge, Brave, macOS Firefox, Chrome, Edge, Safari, Android Firefox, and iOS/iPadOS Safari, Brav...
CVE-2026-114456
Multiple Snowflake client drivers implementing the authenticator=externalbrowser single sign-on flow could have allowed an attacker to interfere with a user's login attempt through weaknesses in the local loopback callback listener used to receive the identity provider's response. The listener...
CloakQuest3r
If you find this GitHub repo useful, please consider giving it a star! ⭐️ CloakQuest3r is a Python-based security research tool designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services. Websites often rely on...
theftfuzzer
┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduction: TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. Usage: python theftfuzzer.py -d 'http://example.com/api/data' Help: python...
singularity
Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...
hakoriginfinder
hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...
WordPress Stape Conversion Tracking plugin < 2.3.11 - Unauthenticated SSRF and Same-Origin XSS vulnerability
Unauthenticated SSRF and Same-Origin XSS vulnerability discovered by Joep van Antwerpen in WordPress Plugin GTM Server Side versions 2.3.11...
Cloudflare-Bypass
Cloudflare-Bypass Cloudflare Bypass tools | PentestCore Is a tool for bypassing Cloudflare that you can use to get the master IP of site server. How to use Linux : Enter the below command in the terminal : git clone https://github.com/pentestcore/Cloudflare-Bypass.git cd Cloudflare-Bypass Install...
CVE-2026-118422
The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin proxy's upstream endpoint, allowing unauthenticated visitors to redirect the server-side request to an arbitrary host and have the response body and its content type returned fr...
CVE-2026-118422
The Stape Conversion Tracking WordPress plugin (versions before 2.3.11 ) is vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) . The root cause is a failure to validate the sub-path appended to the plugin's same-origin proxy's upstream endpoint. This allows unauthenti...
Havoc-C2-SSRF-poc
CVE-2024-41570: Havoc-C2-SSRF-poc This vulnerability is exploited by spoofing a demon agent registration and checkins to open a TCP socket on the teamserver and read/write data from it. This allows attackers to leak origin IPs of teamservers and much more. Full analysis:...
vuln-chain-lab
File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...
cloudbunny
CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...
dns-rebind-toolkit
DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...
SiYuan 2.9.0-3.8.6 - Unauthenticated XSS via check-auth "to" Parameter
SiYuan 2.9.0 through 3.8.6 serves the unauthenticated /check-auth authorization page app/stage/auth.html with a script that assigns the to query parameter to window.location.href without scheme validation. A crafted link whose to value is a javascript: URI executes script in the kernel origin onc...
Webmin < 1.920 - Authenticated Remote Code Execution
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...
mcp-chrome-bridge (hangwin/mcp-chrome) <= 1.0.31 - CORS Origin Bypass (CSWSH)
mcp-chrome-bridge =1.0.31 uses origin.startsWith for CORS, so origins like http://127.0.0.1.evil.com are wrongly allowed, letting attackers bypass CORS and access the local server. id: CVE-2026-102878 info: name: mcp-chrome-bridge hangwin/mcp-chrome = 1.0.31 - CORS Origin Bypass CSWSH author:...
BeyondTrust Remote Support <= 26.2.3 - Origin Validation File Upload
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. id: CVE-2026-102764...
Transmission 4.0.0-4.1.2 - Permissive CORS Exposes RPC Session ID
Transmission 4.0.0 through 4.1.2 sends Access-Control-Allow-Origin: on RPC responses and advertises X-Transmission-Session-Id via Access-Control-Expose-Headers on the 409 session handshake. Any website a user visits can read the session-id nonce that guards against CSRF, enabling cross-origin...
