52416 matches found
EUVD-2026-92071
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page Contributor and above, once permitte...
selenium-wire
Selenium Wire больше не поддерживается. Спасибо за вашу поддержку и все ваши вклады. Selenium Wire Selenium Wire расширяет Python-привязки Selenium , давая вам доступ к базовым запросам, выполняемым браузером. Вы пишете код так же, как и при работе с Selenium, но получаете дополнительные API для...
PyStegosploit
PyStegosploit - Exploit Delivery via Steganography and Polyglots video1 | video2 | page by Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael May 2021 Stegosploit creates a new way to encode "drive-by" browser exploits and deliver them through image files. These payloads are...
CVE-2024-6651
CVE-2024-6651 POC XSS - CVE-2024-6651 Functional PoC for vulnerability CVE-2024-6651, which affects the plugin WP File Upload 4.24.8, allowing Reflected Cross-Site Scripting XSS in WordPress. 📌 Description This vulnerability allows arbitrary JavaScript code injection via an unsanitized parameter ...
fufu-sec
fufu-sec fufu-secFramework for Uninvited Frequency Usage는 개인 및 기업 무선 감사를 위한 차세대 WiFi 보안 프레임워크입니다. 단일 브라우저 대시보드에서 802.11 네트워크의 전체 공격 표면을 다룹니다. 네트워크 탐색, 핸드셰이크 캡처, PMKID 추출, WPS 공격, 로그 액세스 포인트, 서비스 거부, WEP 크래킹, GPU 가속 비밀번호 복구까지 모두 한곳에서 제공합니다. 승인된 사용만 허용됩니다. 소유한 네트워크 또는 감사에 대한 서면 허가를 받은 네트워크만 테스트하세요...
CVE-2026-17005: Undefined Security Weakness
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page Contributor and above, once permitte...
PT-2026-104608
Name of the Vulnerable Software and Affected Versions Horizontal scrolling announcements versions prior to 2.7 Description The plugin fails to sanitize and escape an announcement setting before it is output into an attribute context on the front end. This allows users with access to the...
CVE-2012-1723
Web browser drive-by that exploits CVE-2012-1723 for remote code execution. A walk-through and technical details can be found at https://ethaniel.me/2017/02/09/practice-the-past-cve-2012-1723/...
heartbleedchecker-chrome
This repository does not have a README...
CVE-2026-100380
CVE-2026-100380: Отражённый XSS в ошибках валидации языка Автор отчёта: Marco Paciaroni BomboBombone. Wikibase включал неэкранированный текст ошибки валидации языка на странице SetLabel. Отклонённый ввод мог возвращаться как исполняемый HTML до того, как запрос достигал операции сохранения метки...
CVE-2017-17692
CVE-2017-17692 Exploit Title: SOP Bypass Date: 06 Septmber 2017 Software Link: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ Category: Browser Video PoC:...
LAB-DFIR-cve-2023-38831
LAB-DFIR-cve-2023-38831 This lab simulates a CVE-2023–38831 attack and must investigate diskimage and contains a variety of questions including understanding the Windows registry, NTFS files, cache browser, and a complete understanding of the functions that come out of Windows in the sequence of...
CVE-2016-3113
CVE-2016-3113 PoC A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface RedHat. In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session. JS code has been kept simple due to the rush. More Info here:...
Apple-Safari-Remote-Code-Execution-CVE-2020-27930
This repository does not have a README...
CheckFlashPlayerVersion
CheckFlashPlayerVersion Check the Browser's FlashPlayer version to check if it is vulnerable to exploit CVE-2016-7855 Usage: Clone this repository and then open the html file in the browser where you want to check the Flash Player version...
react2shell-checker
React2Shell Checker A security vulnerability scanner for detecting the React2Shell vulnerability CVE-2025-55182 in Next.js and React applications. Overview React2Shell Checker allows you to scan websites to detect if they are running vulnerable versions of Next.js or React Server Components. The...
reverse-engineering-browser
Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...
s3cXSSer
s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...
Venom
Venom Venom is a C++ library that is meant to give an alternative way to communicate, instead of creating a socket that could be traced back to the process, it creates a new "hidden" there is no window shown detached edge process edge was chosen because it is a browser that is installed on every...