121581 matches found
dns-zone-audit
DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...
Schools Alert Management Script - Arbitrary File Read
Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal. id: CVE-2018-12054 info: name: Schools Alert Management Script - Arbitrary File Read author: wisnupramoedya severity: high description: Schools Alert...
Dolibarr <7.0.2 - Cross-Site Scripting
Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. id: CVE-2018-10095 info: name: Dolibarr 7.0.2 - Cross-Site Scripting author: pikpikcu severity: medium...
Apache Tomcat 4.x-7.x - Cross-Site Scripting
Apache Tomcat 4.x through 7.x contains a cross-site scripting vulnerability which an attacker can use to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. id: CVE-2007-2449 info: name: Apache Tomcat 4.x-7.x - Cross-Site Scripting author:...
CVE-2022-1388-F5-BIG-IP
CVE-2022-1388-F5-BIG-IP Place target.txt in the same directory and execute directly...
CLEANSTART-2026-OX66799 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...
PT-2026-107976
ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...
Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via...
EUVD-2026-92633
Ghost : Stored XSS via SVG Files in Content Imports...
defender
π‘οΈ Linux-Defender.sh π Table of Contents π Overview π Features π§ Supported Distros π¦ Tools Installed βοΈ Installation Building from Source General π¦ Package Installation Debian .deb Package Arch Linux Package π§° Running the Defender π§Ύ License πββοΈ Author β Support & Contribution π Overview Linux...
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...
EUVD-2026-92756
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...
GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...
EUVD-2026-92770
Ghost: Stored XSS via File Uploads on Local Storage...
CVE-2026-106575
A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...
wp-CVE-2017-5487-exploit
WordPress CVE-2017-5487 Exploit in Python Usage Examples: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...
CVE-2018-1049-POC
This Python script is a custom reimplementation of the Metasploit module exploit for CVE-2018-1049, which targets VyOS Vyatta via a privilege escalation vulnerability in a Perl script misused through sudo. You need valid SSH credentials. You gain root via command injection in a sudo-permitted...
CVE-2025-66177
β οΈ Disclaimer / Disclaimer In Spanish: This code and related material are provided solely for educational purposes, security research, and legitimate, authorized penetration testing. Using this script against targets without the prior and explicit written consent of the system owner is illegal and...
joern
Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...
DEBIAN-CVE-2026-106575
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...