CVE-2017-5487

PoC - CVE-2017-5487 - Enumeración de Usuarios de WordPress vía REST Configuración git clone https://github.com/ndr-repo/CVE-2017-5487.git powershell -noexit -ExecutionPolicy Bypass -File .ps1 Uso .\Enumerate-WordPressOrgMembersREST.ps1 Ruta Alternativa 1 para Evadir WAF...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2022-1598

CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Nuclei Template: CVE-2022-1598.yaml VIDEO POC: https://www.youtube.com/watch?v=MbhiQKWvivQ References: https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8 https://vulners.com/cve/CVE-2022-1598...

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities. Aspect| Information ---|--- Tool name| IaC Scan Runner Docker image| xscanner/runner PyPI package| iac-scan-runner Documentation| docs Contact us| [email protected] Table of Contents Description Runnin...

CVE-2022-1388

CVE-2022-1388 A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. USAGE python3 f5bigipscanner.py...

CVE-2026-84842 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

EUVD-2026-89188

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is susceptible to a path traversal and arbitrary file deletion vulnerability within the Datasource REST component . An authenticated remote attacker can exploit this flaw to delete files, which may result in a denial of service or compromise system integrity . No...

CVE-2025-1562

CVE-2025-1562 POST /index.php?restroute=%2Fautonami-app%2Fplugin%2Finstallandactivate&bwf-nonce=0f2449cddf9a7d692627071cfdef9ecf HTTP/2 Host: wp.192.168.31.110.nip.io User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/91.0.4472.124 Safari/537.36...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

burp-automation

BurpOMation 使用 Burp Suite Pro 和 Vmware Burp Rest API 结合 Robot Framework 及 Python3 执行自动化扫描。 博客 如需详细了解每一步，请访问博客。 说明与安装博客 功能 一键运行，通过 bash 安装所有依赖项，并显示详细的先决条件信息。 使用 Python3 和易于自动化的 Robot Framework。 使用 Burp Suite Rest API，在无头模式下运行 Burp Suite Professional（预激活版），同时加载多个 Burp Suite 扩展，如...

BARK

BARK BARK 代表 BloodHound Attack Research Kit（BloodHound 攻击研究工具包）。它是一个 PowerShell 脚本，旨在帮助 BloodHound Enterprise 团队研究和持续验证滥用原语。BARK 目前专注于微软的 Azure 系列产品和服务。 BARK 不需要任何第三方依赖。BARK 的函数设计得尽可能简单且易于维护。大多数函数只是用于向各种 REST API 端点发出请求的简单包装器。BARK 的基本函数甚至不依赖彼此——你可以将几乎任何 BARK 函数独立提取出来，它都能作为独立函数在你自己的脚本中完美运行。 作者与贡献者...

f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Parche Rápido CVE 2021-44228. Resumen Esta herramienta se conecta a un dispositivo BIG-IP y crea un conjunto de firmas personalizado llamado CVE-2021-4428 y lo aplica a todas las políticas en modo de bloqueo. También aplica todas las...

CVE-2020-17518

Apache Flink目录遍历漏洞，可通过REST API读/写远程文件 Vulnerabilidad de path traversal en Apache Flink que permite lectura/escritura remota de archivos a través de la API REST 漏洞编号： ID de vulnerabilidad: CVE-2020-17518 漏洞描述： Descripción de la vulnerabilidad: CVE-2020-17518：通过REST API写入远程文件 CVE-2020-17518:...

PyJFuzz

PyJFuzz es un framework pequeño, extensible y listo para usar que se utiliza para fuzzear entradas JSON , como API REST de endpoints móviles, implementación JSON, navegadores, ejecutables de línea de comandos y mucho más. Versión | 1.1.0 ---|--- Página principal | http://www.mseclab.com/ GitHub |...

CVE-2026-25197

CVE-2026-25197: Omisión de Autorización mediante Clave Controlada por el Usuario IDOR Aviso Campo| Valor ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 9.1 Crítico Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 Omisión de Autorización mediante Clave...

wp2shell-vulnerability-scanner

WP2Shell Scanner Una herramienta de auditoría de seguridad de solo lectura y no destructiva que escanea instalaciones de WordPress en busca de la cadena de vulnerabilidades wp2shell. Resumen WP2Shell Scanner es una utilidad bash que busca recursivamente en un árbol de directorios instalaciones de...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 English Description This lightweight WordPress plugin serves as a temporary virtual patch mitigation against the critical...

wordpress-batch-rce-lab

wp2shell: RCE por lotes en WordPress Un análisis técnico de CVE-2026-63030, un fallo lógico en el endpoint de lotes de la API REST de WordPress que permite que una solicitud anónima se envíe bajo la ruta y verificación de permisos de otra solicitud, encadenándose con CVE-2026-60137 inyección SQL...

wp2shell-scanner

wp2Shell Scanner – con PoC CVE-2026-63030 y CVE-2026-60137 – escáner de la cadena de vulnerabilidades wp2shell de WordPress Herramienta autorizada de investigación en seguridad con PoC opcional de verificación de comandos. wp2shell-scanner detecta la cadena de vulnerabilidades wp2shell de WordPre...