shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

Hikvision-City-Hunter

La herramienta definitiva de reconocimiento y explotación a nivel de ciudad para 2025 para cámaras IP Hikvision, DVRs y NVRs Salida en vivo de consola • DVRs/NVRs resaltados en púrpura • Cámaras en verde • Descarga automática de instantáneas • Filtrado de honeypots...

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleW...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - 任意文件上传漏洞利用 CVE-2024-56264 概述 本仓库包含 CVE-2024-56264 的利用代码，该漏洞是 WordPress ACF City Selector 插件（版本 = 1.14.0）中的 任意文件上传 漏洞。攻击者可以通过该漏洞向易受攻击的 WordPress 实例上传 恶意 PHP 文件（Web Shell） ，并在服务器上执行任意命令。 CVE 详情 CVE ID: CVE-2024-56264 发布日期: 2025年1月2日 受影响插件: ACF City...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - 任意文件上传漏洞利用 CVE-2024-56264 概述 此仓库包含针对 CVE-2024-56264 的利用代码，该漏洞是 WordPress ACF City Selector 插件（版本 = 1.14.0）中发现的任意文件上传 漏洞。此漏洞允许攻击者将恶意 PHP 文件（Web Shell）上传到存在漏洞的 WordPress 实例，并在服务器上执行任意命令。 CVE 详情 CVE ID: CVE-2024-56264 发布日期： 2025年1月2日 受影响插件： ACF City...

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, malware, data breaches, scams, and new attack methods. The latest ThreatsDay Bulletin puts all of these short updates ...

CVE-2025-65342

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people...

CVE-2025-65342

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

CVE-2025-65342

The code-projects Blood System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the /don.php page, specifically when processing the city field due to improper neutralization of input during web page generation. While technical details regarding the root cause and remediation a...

CVE-2025-65342: Improper Neutralization of Input During Web Page Generation

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

CVE-2025-65342

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

PT-2026-66579

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

EUVD-2025-210559

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

SummaryA stored Cross-site Scripting XSS vulnerability was identified in the RSE metadata of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI...

CVE-2026-14735

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-14735

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-14735 code-projects Smart Parking System parkings.php sql injection

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-14735

CVE-2026-14735 affects code-projects Smart Parking System 1.0, specifically the unknown function in /parkings/parkings.php. The vulnerability arises from manipulating the street, city, or status arguments, leading to an SQL injection. A remote attack is possible and the exploit has been disclosed...

EUVD-2026-41743

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...