2465 matches found
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...
Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting
A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability exploitable through Cross-Site Request Forgery CSRF. id: CVE-2025-47204 info: name: Bootstr...
CVE-2023-22515
红队工具-Confluence未授权添加管理员用户CVE-2023-22515漏洞利用工具 漏洞影响范围 root@kitploit: 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server = 8.2.3 8.3.0 = Confluence Data Center and Confluence...
https-nj.gov---CVE-2019-8331
https-nj.gov---CVE-2019-8331 Informe de vulnerabilidad del sitio oficial de Nueva Jersey Bootstrap 4.0.0 Encontrado en https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Información de vulnerabilidad: Medium 28236 XSS en las propiedades data-template, data-content y data-title de...
CVE-2023-28432
CVE-2023-28432 CVE-2023-28432 Minio Information isclosure Exploit Usage 将url写入urls.txt，直接运行python CVE-2023-28432.py 即可 兼容格式：http://ip:port，ip:port root@kitploit: python CVE-2023-28432.py ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ █████╗ ██╗ ██╗██████╗ ██████╗ ██╔════╝██║...
nmap-bootstrap-xsl
nmap-bootstrap-xsl Tenga una bonita interfaz para revisar los resultados de sus escaneos de Nmap. Este software no debe ser utilizado por organizaciones militares o de servicios secretos. Cómo usar 1. Nuevo escaneo de Nmap Agregue nmap-bootstrap.xsl como hoja de estilo a su escaneo de Nmap con el...
Bootstrap-with-XSS
Bootstrap 历史漏洞 PoC 集合 这是一个用于学习和研究的静态 HTML 页面，集成了多个 Bootstrap 框架历史上的跨站脚本（XSS）漏洞概念验证（PoC）。 此项目旨在为安全研究人员、开发者和学生提供一个安全、可控的环境，用于理解和验证这些特定的安全漏洞，而无需搭建复杂的服务器环境。 ⚠️ 重要安全警告 仅供学习研究 ：此项目及其所有代码仅用于授权的、合法的安全研究和教学目的。 严禁非法攻击 ：严禁使用此工具或其包含的任何代码对任何您不拥有或未获明确授权的网站进行测试或攻击。未经授权的渗透测试是违法行为。 风险自负 ：您对使用此项目所造成的一切后果负全部责任。 🚀...
pwndrop
pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...
CVE-2026-61807
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, a stored manufacturer or supplier name passed as the table component $name becomes data-selected-count-id in resources/views/partials/bootstrap-table.blade.php. Client-side code reads the browser-decoded countId, uses it as a...
CVE-2026-61807
Snipe-IT versions before 8.6.2 are vulnerable to stored DOM XSS: a crafted manufacturer/supplier name flows into data-selected-count-id in bootstrap-table.blade.php, is decoded client-side, and is injected via jQuery .after(), executing JS in authenticated users' sessions. Fix is version 8.6.2. N...
CVE-2026-50651 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-50659 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-50524 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-74JP-VM22-8Q8X vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-RP2P-6CMP-JXJ9 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-QVW7-JM5C-6HQW vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-WP74-JGXH-GV4Q vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-50528 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...