wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

HopLa

HopLa - Burp コパイロット 💥 PayloadsAllTheThings のすべてのパワーを、オーバーヘッドなしで。 この拡張機能は、インテリジェントなオートコンプリートと組み込みペイロードによって Burp Suite を強化し、侵入テストを簡素化します。 Ollama、OpenAI、Gemini などの AI プロバイダーとの統合をサポートし、チャットやコンテンツの生成/変換などの高度な機能を提供します。 独自のペイロードを追加して、ニーズに合わせてカスタマイズすることもできます! 開発者: Alexis Danizan Synacktiv 🥷 によりオープンソースとして...

CVE-2022-26159-Ametys-Autocompletion-XML

CVE-2022-26159-Ametys-Autocompletion-XML Ametys CMS のオートコンプリートプラグインに保存されたすべてのデータを、ローカルの sqlite データベースファイルに自動的にダンプする Python エクスプロイト。 機能 オートコンプリートプラグインが返す最大結果数の自動検出。 深さ優先探索による全結果のダンプ。 ログファイルの出力。 使用方法 $ ./CVE-2022-26159-Ametys-Autocompletion-XML.py -h CVE-2022-26159-Ametys-Autocompletion-XML v1.1 - ...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints. remote-method-guesser was presented at Black Hat USA2021 within the Arsenal sessions. The recording of the session and...

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim allows a hacker to execute arbitrary code.

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-49216 Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response data

Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, the Stimulus controller in symfony/ux-autocomplete renders AJAX response items in createAutocompleteWithRemoteData by interpolating the text field into HTML template literals $itemlabelField rather than text,...

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

Appsmith 安全漏洞

Appsmith is an open-source platform developed by Appsmith itself, used for building, deploying, and maintaining internal applications. Appsmith has a security vulnerability, which stems from the autocompletion feature of the SQL query editor failing to clean up database object names. This...

CVE-2026-28511 elabftw has entry title leakage through autocompletion search

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

CVE-2026-28511 elabftw has entry title leakage through autocompletion search

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

CVE-2026-49378

JetBrains TeamCity prior to version 2026.1 exposes credentials parameters through parameter autocompletion. Affected product: TeamCity server. Root cause: credential values were surfaced in autocompletion UI, enabling potential disclosure. This entry provides no specific exploit details, affected...

EUVD-2026-33386

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

CVE-2026-49378: Missing Authorization

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion...

PT-2026-44958

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1 Description Credentials parameters are exposed through the parameter autocompletion feature. Recommendations Update to version 2026.1...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions of JetBrains TeamCity prior to 2026.1...

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform developed by the Indian company HCL. HCL AION has a security vulnerability, which stems from the use of autocompletion features for certain input fields. This may lead to sensitive information being stored in the browser, potentially causing...