Watchguard_WebUI_Unpacker

Watchguard Fireware Web UI update unpacker unpackwatchguard is a tool that unpacks this file format sysa-dl. watchguardsysadl.ksy contains Kaitai description of Watchguard Fireware web update file format. Info This update format is used by WatchGuard Firebox firewalls. The unpacker has been teste...

agent_tesla_panel_rce

agentteslapanelrce Este módulo explota la vulnerabilidad de inyección de comandos en el centro de control de Agent Tesla. Configuración Los recursos para realizar pruebas están disponibles aquí: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows Para WebPanel1.7z RCE no...

tbhm

La Metodología del Cazador de Bugs TBHM ¡Bienvenido! Este repositorio es una colección de consejos trucos herramientas análisis de datos y notas relacionadas con las evaluaciones de seguridad de aplicaciones web y, más específicamente, con la caza de bugs en programas de bug bounty. Las secciones...

CentOS-Control-Web-Panel-CVE

CentOS Control Web Panel version 0.9.8.836 - 0.9.8.847 On June 29, 2019 our team started to find vulnerability on CentOS Control Web Panel CWP version 0.9.8.836, and we found some critical vulnerabilites. Some of the vulnerabilities we found can be chained to compromise the server from anonymous...

CVE-2024-28987

CVE-2024-28987 - Exploit de Credenciales Hardcodeadas en SolarWinds Web Help Desk ⚠️ DESCARGO DE RESPONSABILIDAD: Esta herramienta es solo para fines educativos y de pruebas de seguridad autorizadas. El acceso no autorizado a sistemas informáticos es ilegal. Utiliza esta herramienta únicamente en...

Phpweb-Getshell-py

Phpweb-Getshell-py Phpweb=2.0.35 Tutorial de uso, consulte www.0-sec.org...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault is a lightweight PHP web tool designed for system administrators to securely add new user credentials to shadow files on shared hosting environments. It automatically detects existing shadow aging format, uses SHA-512 password hashing, supports multiple write fallback...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...

git-dump

git-dump This script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and 'BeautifulSoup', this script examines the directory structure, downloads files, and identifies SHA-1 hashes within Git files. Feature...

changedetection.io

اكتشاف تغييرات المواقع تلقائيًا — راقب تغييرات صفحات الويب في الوقت الفعلي راقب المواقع بحثًا عن التحديثات — واحصل على إشعارات عبر Discord وEmail وSlack وTelegram وWebhook وغيرها الكثير. اكتشف تغييرات محتوى صفحات الويب واحصل على تنبيهات فورية. مثالي لمراقبة تغييرات الأسعار، وتعديلات المحتوى،...

CVE-2026-22849

CVE-2026-22849: Saleor lacks proper HTML sanitization in rich text fields Overview Field| Details ---|--- CVE ID| CVE-2026-22849 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products saleor/saleor Details Saleor was allowing users to modify rich text fields with HTM...

osticket-stored-xss-security-assessment

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip Consultant-Style Cybersecurity Report Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--- Report...

CVE-2026-14999

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures...

CVE-2026-13258

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended...

CVE-2025-67160

CVE-2025-67160 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware exposes multiple internal web directories without requiring authentication. When directory indexing is enabled on the embedded web server, unauthenticated attackers can access directories such as /cgi-bin/, /view/,...

CVE-2026-107287 Pydantic AI: Excessive resource use when local web fetching converts nested HTML

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local webfetchtool and the WebFetch local fallback can consume excessive CPU and memory during HTML-to-Markdown conversion of attacker-controlled HTML...

CVE-2020-3452-Cisco-Scanner

CVE-2020-3452 - Escáner Cisco ASA Escaneo para CVE-2020-3452 - Path Traversal no autenticado que afecta a cortafuegos Cisco ASA con anyconnect https://vulners.com/cve/CVE-2020-3452 Documentos de soporte:...

suds

VISIÓN GENERAL El cliente de servicios web "Suds" es un cliente ligero basado en soap para python que está licenciado bajo LGPL. Para más detalles, visita: Sitio del proyecto: https://fedorahosted.org/suds/ Documentación: https://fedorahosted.org/suds/wiki/Documentation Epydocs:...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References:...

CVE-2025-32118

🚀 CVE-2025-32118 - Exploit RCE del Plugin CMP de WordPress 🔍 Título: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Ejecución Remota de Código RCE 🗓️ Publicado: 2025-04-04 🔐 CWE: CWE-434 - Carga sin restricciones de archivos de tipo peligroso 📊 CVSS: 9.1 CRÍTICO —...