CVE-2022-21449

CVE-2022-21449 Repo zur Demonstration der Generierung einer Base64-Signatur für Anwendungen, die anfällig für „psychische Signaturen in Java“ sind, implementiert in einer Node.js-Umgebung 😅 Stelle vor dem Ausführen sicher, dass der modifizierte Fork von elliptic von...

CVE-2026-12561

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vcrawhtml shortcode in all versions up to and including 5.4.5. This is due to insufficient input sanitization and output escaping in the vcrawhtml::render method, which base64-decodes shortcode content...

UI_CVE-2017-9248

UICVE-2017-9248 Base64-basierter Encryption-Oracle-Exploit für CVE-2017-9248 Telerik UI for ASP.NET AJAX Dialog-Handler...

br0w

br0w اخترق Br0w | العب بمتصفحك وتعلم المزيد، استمتع بالاختراق!! Br0w هو تطبيق ويب بسيط لتعلم أساسيات أمن الويب باستخدام المتصفح كأداة يغفل عنها الناس أحيانًا رغم فوائدها العديدة. قد يكون أشبه بـ Capture The Flag CTF. أحد التحديات هو تعطيل CSS وفك الترميز base64 عبر وحدة التحكم، العب أكثر على...

EUVD-2026-65290

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vcrawhtml shortcode in all versions up to and including 5.4.5. This is due to insufficient input sanitization and output escaping in the vcrawhtml::render method, which base64-decodes shortcode content...

CVE-2026-12561 tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vcrawhtml shortcode in all versions up to and including 5.4.5. This is due to insufficient input sanitization and output escaping in the vcrawhtml::render method, which base64-decodes shortcode content...

CVE-2019-15715

CVE-2019-15715 المستودع الحالي هو تنفيذ بلغة Python3 لـ CVE-2019-15715 ويهدف إلى التركيز على تحسين CVE-2019-15715 المُبلَّغ عنه سابقًا هنا بواسطة Nikolas Geiselman، وذلك بإضافة تنفيذ معاملات بايثون لجعل السكربت أكثر مرونة. root@kitploit: python3 CVE-2019-15715.py -rh $TARGETIP -rp $TARGETPORT -lh...

some-tweak-to-hide-jwt-payload-values

Ein kleiner Trick zum Verstecken von JWT-Payload-Werten eine Handvoll Anpassungen und Ideen, um die JWT-Payload zu schützen, sodass der Versuch, sie durch ständige Änderung ihres Wertes zu dekodieren, sinnlos wird, während sichergestellt wird, dass die dekodierte Ausgabe unverständlich bleibt und...

CVE-2019-13292-WebERP_4.15

Blind SQL Injection Exploit for WebERP यह Python3 स्क्रिप्ट है जो WebERP संस्करण 4.15 में Blind SQL Injection कमज़ोरी vulnerability का शोषण करने का प्रदर्शन करती है, जिसे मूलतः 10 जून 2019 को Semen Alexandrovich Lyhin द्वारा खोजा गया था। मूल शोषण exploit यहाँ पाया जा सकता है, और WebERP सिस्टम के...

CVE-2023-35840

CVE-2023-35840 elFinder 2.1.62 - Vulnerabilità di Path Traversal nel connettore PHP LocalVolumeDriver Descrizione Vulnerabilità di Path Traversal nel connettore PHP LocalVolumeDriver. Questa vulnerabilità può essere sfruttata consentendo a utenti non fidati di scrivere nel file system locale. La...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interattiva dirottamento HTTP + POST + AES-256-CBC/BASE64 Rilevamento -dnslog Rilevamento senza output DNSLog Nuclei -poc Rilevamento Echo di vulnerabilità Sfruttamento -exp Shell interattiva echo base64 -exp2 Shell interattiva dirottamento HTT...

CVE-2014-6271

Hellshocker 0.1.1 Tool zur Ausnutzung der Shellshock-Sicherheitslücke Müde von schwachen Shellshock-Exploits oder einfach nur "/bin/bash & /dev/tcp/IP/port 0&1" in den Server zu gelangen? Ja, du musst etwas Komplexeres auf den Server hochladen und ausführen, und das Base64-Kodieren einer riesigen...

EUVD-2026-64859

RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controlled screen value directly with the application's source/ directory and opens the resulting path without verifying that...

CVE-2022-28986

CVE-2022-28986 Una vulnerabilità di Insecure Direct Object References IDOR nel "Simple 2FA Plugin for Moodle" di LMS Doctor Dettagli della vulnerabilità Rischio : Critico Fornitore: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgato da: Flaviu Popescu Descrizione: Vulnerabili...

Invoke-Transfer

Invoke-Transfer Trasferimento dati tramite Appunti di PowerShell Invoke-Transfer è uno strumento PowerShell che ti aiuta a inviare file in ambienti altamente limitati come Citrix, RDP, VNC o Guacamole. Puoi inviare file in formato testo, in piccoli chunk codificati in Base64 o in testo semplice...

CVE-2026-67362 Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Four task handlers accepted a base64-encoded URL from user input and redirected to it without validating the destination host, enabling phishing using the shop's trusted domai...

CVE-2026-67362

J2Store (a Joomla e-commerce extension by j2commerce.com) contains an open redirect vulnerability in its cart controller . Four task handlers accepted a base64-encoded URL from user input and redirected to it without validating the destination host. This allows an attacker to craft a link that ap...

EUVD-2026-64061

Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Four task handlers accepted a base64-encoded URL from user input and redirected to it without validating the destination host, enabling phishing using the shop's trusted domai...

JavaDeRe

Introduzione al progetto Utilizzato principalmente per codificare in base64 la classe durante la costruzione di payload di echo per la deserializzazione Java e, in situazioni di emergenza, per decodificare stringhe base64 e ripristinare il file class, consentendo di esaminare il payload...

Sleipnir

Sleipnir Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Rilasciato sotto AGPL, vedi LICENSE per maggiori informazioni Descrizione Sleipnir è un piccolo eseguibile...