Rukovoditel <= 2.7.2 - Cross Site Scripting

A stored cross site scripting XSS vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter. id: CVE-2020-35984 info: name: Rukovoditel = 2.7.2 - Cross Site...

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

Rukovoditel <= 3.2.1 - Cross-Site Scripting

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Entities Group feature at/index.php?module=entities/entitiesgroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Vanna - SQL injection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

JustWriting - Cross-Site Scripting

A cross-site scripting vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter. id: CVE-2021-41467 info: name: JustWriting - Cross-Site Scripting author: madrobot severity: medium...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Rukovoditel <= 2.7.2 - Cross-Site Scripting

A stored cross site scripting XSS vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter. id: CVE-2020-35987 info: name: Rukovoditel = 2.7.2 - Cross-Site...

Micro Focus UCMDB - Remote Code Execution

Micro Focus UCMDB is susceptible to remote code execution. Impacted products include Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions, and Operations Bridge containerized 2020.05, 2019.08, 2019.0...

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

PowerJob <=4.3.2 - Unauthenticated Access

PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. id: CVE-2023-29923 info: name: PowerJob =4.3.2 - Unauthenticated Access author: For3stCo1d severity: medium description: | PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. impact: ...

ATutor < 2.2.1 - Cross Site Scripting

ATutor 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting XSS, in ATtutor 2.2.1 via token body parameter. id: CVE-2023-27008 info: name: ATutor 2.2.1 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ATutor 2.2.1 was discovered with a vulnerability, a...

dfirtrack

DFIRTrack डिजिटल फॉरेंसिक और घटना प्रतिक्रिया ट्रैकिंग एप्लिकेशन एक ओपन सोर्स वेब एप्लिकेशन है जो मुख्य रूप से Django पर आधारित है और PostgreSQL डेटाबेस बैक एंड का उपयोग करता है। अन्य महान घटना प्रतिक्रिया उपकरणों के विपरीत, जो मुख्य रूप से केस-आधारित होते हैं और CERT, SOC आदि के दैनिक कार्यों मे...

cheat-engine

Cheat Engine Cheat Engine एक डेवलपमेंट वातावरण है जो व्यक्तिगत उपयोग के लिए गेम और एप्लिकेशन को मॉड करने पर केंद्रित है। डाउनलोड नवीनतम संस्करण पुराने संस्करण लिंक वेबसाइट फ़ोरम फ़ोरम वैकल्पिक फ़ोरम वैकल्पिक विकी सोशल मीडिया Reddit Twitter दान करें Patreon PayPal मूल बिल्ड निर्देश 1. Lazarus 2.2....

CVE-2025-29927-Proof-of-Concept

دليل تفصيلي الخطوة 1 5 دقائق تلميح ما هي خدمات الشبكة المكشوفة من الهدف؟ — — — الحل kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p الخطوة 2 5 دقائق تلميح 1 الصفحة الرئيسية تظهر فقط صفحة تسجيل دخول، لكن خوادم الويب غالباً ما تكشف عن مسارات إضافية. تلميح 2 حاول استخدام أداة تخمين أدلة مثل Gobuster أو...

Application-Security-Curriculum

एप्लिकेशन-सुरक्षा-पाठ्यक्रम Grant Ongers - शिक्षा के माध्यम से AppSec को स्केल करना - DEF CON 29 AppSec Village...

Awesome-WAF

Awesome WAF वेब एप्लीकेशन फ़ायरवॉल WAF के बारे में सब कुछ, एक सुरक्षा दृष्टिकोण से। 🔥 प्रस्तावना: यह मूलतः WAF पर मेरा अपना संग्रह था। मैं इसे इस उम्मीद में ओपन-सोर्स कर रहा हूँ कि यह पेंटेस्टर्स और शोधकर्ताओं के लिए उपयोगी होगा। जैसा कि कहावत है, "समुदाय एक-दूसरे से सीखता है।" एक संक्षिप्त...

Klip

Klip مدير كلمات مرور بسيط يعمل من الطرفية. الميزات · التثبيت · الاستخدام · الأمان الميزات يعمل دون اتصال بالإنترنت بالكامل. تشفير آمن باستخدام Argon2id لاشتقاق المفاتيح والتشفير الموثّق عبر libsodium. مولّد كلمات مرور آمن. واجهة TUI مخصّصة مبنية دون مكتبات خارجية. التثبيت AppImage نزّل ملف AppIma...

pyfiscan

pyfiscan परिचय Pyfiscan एक मुफ्त वेब-एप्लिकेशन भेद्यता और संस्करण स्कैनर है और इसका उपयोग Linux-सर्वरों में सामान्य वेब-एप्लिकेशन के पुराने संस्करणों का पता लगाने के लिए किया जा सकता है। उदाहरण उपयोग मामला होस्टिंग-प्रदाताओं का है जो सुरक्षा-अपडेट के साथ बने रहने के लिए अपने उपयोगकर्ताओं की...