CVE-2024-34716

CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...

CrabCrypt

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CrabCrypt🦀🔐 CrabCrypt is a secure file encryption tool with GUI, designed for effortlessly encrypting and decrypting any file. With AES encryption and a sleek Tkinter interface, CrabCrypt ensures your files remain...

XPEViewer

PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...

Apollo

Apollo A simple, lightweight Remote Access Tool written in Python Apollo is a cross-platform Windows, Linux, FreeBSD & MacOS Remote Access Tool for Python 3.4+. Its features are currently very basic but allow for post-exploitation remote code execution as well as obtaining information on the clie...

hackguard

hackguard FAST WEB APPLICATION VULNERABILITY SCANNER Requirements: 1. Make sure python3 is installed in windows Or in Linux 2. For Windows: python -m pip install -r requirements.txt 3. For Linux: python3 -m pip install -r requirements.txt Installation: 1. For Linux Users: a git clone...

CVE-2024-25411

CVE-2024-25411 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php Vulnerability Type : Cross Site Scripting XSS Vendor of Product :...

usn_analytics

USN Analytics Build git clone https://github.com/4n6ist/usnanalytics.git Linux sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make Windows Install MinGW-W64...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner codeclimate maintainability Created by nil0x42 and contributors !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb35833ee8b1f57c068ae36288119...

CVE-2025-44136

CVE-2025-44136 Unauthenticated XSS in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to...

CVE-2026-108566

A cross-site scripting (XSS) vulnerability exists in InstantSoft icms2 versions up to 2.18.2 . The flaw is located in the index function of the templates/default/controllers/messages/index.tpl.php file within the Private Message Handler component. Improper handling of the nickname argument allows...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ For educational purposes and authorized environments only. Functional PoC for vulnerability CVE-2022-47447, which affects a vulnerable WordPress plugin, allowing a Cross-Site Request Forgery CSRF attack against authenticated users. VULNERABLE URL:...

CVE-2025-10377

Proof of Concept CVE-2025-10377 Cross-Site Request Forgery CSRF in Plugin System Dashboard Funtion sdtogglelogs Vulnerability Type: Cross-Site Request Forgery CSRF Affected Function: sdtogglelogs CVSS v3.1: 4.3 Medium Vector: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N Note: Score reflects unauthorized...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

XSSYA

XSSYA-V2.0 ha sido lanzado - consulta https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA es un Escáner de Cross Site Scripting y Confirmación de Vulnerabilidades Funciona con dos Métodos • Método número 1 para Confirmación de Solicitud y Respuesta • Método número 2 para Confirmación: Ejecutar...

duf

duf Utilidad de uso/espacio libre en disco Linux, BSD, macOS y Windows Características Salida amigable y colorida Se adapta al tema y ancho de tu terminal Ordena los resultados según tus necesidades Agrupa y filtra dispositivos Puede generar JSON de forma conveniente Instalación Paquetes Linux Ar...

fapro

FaPro Simulador gratuito, multiplataforma y de un solo archivo para múltiples protocolos de red Readme en chino Descripción FaPro es una herramienta de servidor de protocolos falsos que permite iniciar o detener fácilmente múltiples servicios de red. El objetivo es admitir tantos protocolos como...

nes-vuetify-cve-2025-1461

Vuetify VCalendar XSS Vulnerability POC CVE-2025-1461 This repository contains a proof of concept demonstrating the XSS vulnerability in Vuetify's VCalendar component, specifically in the eventMoreText prop. Vulnerability Details CVE ID : CVE-2025-1461 Affected Versions : =2.0.0 3.0.0 Severity :...

posta

Posta Posta es una herramienta para investigar la comunicación de Mensajería entre Documentos Cross-document Messaging. Permite rastrear, explorar y explotar vulnerabilidades de postMessage, e incluye funciones como la reproducción de mensajes enviados entre ventanas dentro de cualquier navegador...

CVE-2024-31835

CVE-2024-31835 Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a craftedpayload to the file name parameter. Affected Component: FlatPress CMS Admin Panel File Upload Field Fixed version: Flatpress v1.3 - will be fixed in...