session_reaper_lab

CVE-2025-54236 - SessionReaper Lab Entorno Docker para demostración práctica de la CVE-2025-54236 SessionReaper: Deserialización de Objetos PHP que lleva a RCE en Magento Open Source 2.4.7. Uso exclusivo en entorno controlado. No ejecutar contra sistemas sin autorización explícita. Sobre la...

CVE-2026-97637

The JSON API Auth plugin for WordPress (versions up to and including 3.1.2 ) is vulnerable to an Authentication Bypass via cached session cookie disclosure. The root cause is that the required PI-Media/json-api parent plugin caches controller dispatch results using only the URI and query string, ...

EUVD-2026-91259

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637 JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

RemoteDLLInjector

Introducción Esta es una herramienta que se puede utilizar para la inyección de DLL： Desde el momento en que RemoteDLLInjector se ejecuta, proporcionará los pasos completos que realiza para lograr la inyección de DLL. Si la DLL se inyecta correctamente, devolverá una sesión de meterpreter con los...

Burp-Recordadora

🧙‍♂️ Recordadora Recordadora es una extensión para BurpSuite inspirada en Harry Potter. Como la recordadora de Neville, te ayuda a no olvidar ni perder el contexto de tus pruebas. ✨ Funcionalidades Guardar y restaurar historial del Proxy Exportar e importar requests del Repeater Persistir cargas...

CVE-2023-33732

CVE-2023-33732 — eScan管理控制台中的反射型跨站脚本 -orange 概述 CVE-2023-33732 是 MicroWorld Technologies eScan管理控制台 版本 14.0.1400.2281 中发现的一个反射型跨站脚本（XSS）漏洞。该缺陷存在于 新建策略 分配表单（AssignPolicyTemplate 端点）中，允许远程未认证攻击者向任何已认证用户（通过诱导点击精心构造的URL）的浏览器中注入并执行任意JavaScript。...

Exploit for CVE-2026-19660

CVE-2026-14378 — DevKit Pro authentication bypass PoC Proof-o...

Exploit for CVE-2026-14378

CVE-2026-14378 — DevKit Pro authentication bypass PoC Proof-o...

Flask-Unsign

Flask Unsign Herramienta de línea de comandos para obtener, decodificar, descifrar por fuerza bruta y manipular cookies de sesión de una aplicación Flask adivinando claves secretas. Para el componente independiente de lista de palabras, visita el repositorio flask-unsign-wordlist. Requisitos Pyth...

goop

goop Google 搜索抓取器 注意： 该工具已不再可用。我曾向谷歌团队报告过此问题，他们告知我这不是一个合理的问题，但现在他们只是默默修复了它。 目录 简介 工作原理 使用方法 安装 示例 法律声明与免责 简介 goop 可以执行 Google 搜索而不会被 CAPTCHA 拦截或遭受任何速率限制。 工作原理 Facebook 为其抓取器提供了一个调试器工具。 有趣的是，Google 并不会限制该调试器发出的请求（白名单？），因此它可以用来抓取 Google 搜索结果而无需绕过 CAPTCHA。 由于涉及 Facebook，每次请求时必须向库提供 Facebook 会话 Cooki...

CVE-2026-72001-Pangolin-Cross-Org-Auth-Bypass

CVE-2026-72001 — Omisión de autenticación de recursos entre organizaciones en Pangolin Prueba de concepto para CVE-2026-72001 , una falla de autorización a nivel de objeto roto en Pangolin 1.22.0 que permite al poseedor de un enlace para compartir de un recurso generar una sesión de recurso válid...

UsoDllLoader

UsoDllLoader ⚠️ 2020-06-06 更新： 此技巧在最新的 Windows 10 Insider Preview 版本中已不再有效。这意味着，尽管它在 Windows 10 的主流版本上 仍然有效 ，但您应该预料到它在未来几个月内会被修补。 描述 此 PoC 展示了一种可用于在 Windows 上利用特权文件写入漏洞的技术。它提供了 James Forshaw（又名 @tiraniddo）发现的 DiagHub DLL 加载“漏洞”的替代方案，该漏洞自 1903 版本起已被微软修复。 TL;DR 从 Windows 10 开始，微软引入了 Update Session...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 Este repositorio contiene una plantilla yaml para escanear si un servicio puede ser vulnerable a CVE-2025-24813, sin interrumpir el servidor ni causar ningún tipo de daño, utilizando el escáner de vulnerabilidades nuclei. CVE-2025-24813 CVE-2025-24813 es una vulnerabilidad e...

CVE-2026-104480

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie

Wing FTP Server versions prior to 7.4.4 are vulnerable to an authenticated information disclosure vulnerability CVE-2025-47813. The vulnerability occurs due to improper validation of the 'UID' session cookie in the /loginok.html endpoint. Supplying an overlong UID value causes the server to respo...

Atlassian Jira Confluence - Cross-Site Scripting

Atlassian Jira Confluence before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4, and from version 7.9.0 before version 7.9.2, allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the error messa...

JumpServer > 3.6.4 - Information Disclosure

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

Jenkins <=2.196 - Cookie Exposure

Jenkins through 2.196, LTS 2.176.3 and earlier prints the value of the cookie on the /whoAmI/ URL despite it being marked HttpOnly, thus making it possible to steal cookie-based authentication credentials if the URL is exposed or accessed via another cross-site scripting issue. id: CVE-2019-10405...