DET

DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...

Limbas-4.3.36.1319-is-vulnerable-to-Cross-Site-Scripting-XSS-

Limbas-4.3.36.1319-es-vulnerable-a-Cross-Site-Scripting-XSS DESCRIPCIÓN Limbas 4.3.36.1319 es vulnerable a Cross Site Scripting XSS LIMBAS http://www.limbas.org/ - 4.3.36.1319 PRUEBA DE CONCEPTO UPDATE/up20.php la página reflejó el código XSS EJEMPLO DE PAYLOAD 1'"&% DETALLES XSS Cross-site...

vulnrepo

VULNRΞPO - Generador y Repositorio de Informes de Vulnerabilidades Un gestor de informes de vulnerabilidades del lado del cliente, centrado en la privacidad para profesionales de la seguridad. Todos los datos se cifran y almacenan localmente en su navegador; por defecto, no se envía nada a ningún...

cve-2024-26229

cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...

CloakBin

CloakBin Pastebin cifrado de conocimiento cero Tus datos se cifran antes de salir de tu navegador. Nosotros no podemos leerlos. Nadie puede. Demo en vivo • Informar de un error • Solicitar una funcionalidad ¿Por qué Conocimiento Cero? Los pastebins tradicionales almacenan tus datos en texto plano...

CVE-2023-45540

HTML-Injection...

CVE-2025-56800

CVE-2025-56800 Local Authentication Bypass Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-290: Authentication Bypass by Spoofing CVSS : 5.1 MEDIUM Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N...

xtrace-sdk

La base de datos vectorial cifrada. Tus datos nunca salen de tu máquina en texto plano. Documentación | X | LinkedIn Gestiona tu memoria de IA → mem.xtrace.ai ¿Qué es XTrace? Todas las bases de datos vectoriales del mercado requieren que entregues tus datos a un tercero en texto plano. XTrace no ...

html-poc

Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...

cve-2022-25640-exploit

Exploiting CVE-2022-25640 using scapy See CVE-2022-25640.ipynb. CVE-2022-25640 is a vulnerability in wolfSSL before 5.2. It allows a client to circumvent mututation authentication in TLS 1.3 connections...

beef

Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com Vea el archivo 'doc/COPYING' para permisos de copia =============================================================================== ¿Qué es BeEF? BeEF es la abreviatura de The...

sharemylogin

ShareMyLogin Código Abierto Este es el código fuente público de ShareMyLogin.com. ¿Qué es ShareMyLogin? ShareMyLogin es una herramienta segura para compartir información sensible como contraseñas, claves API o secretos de configuración. El Problema Enviar una contraseña por Slack, correo...

CVE-2026-78490

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...

ppfuzz

ppfuzz Fuzzer de Contaminación de Prototipos Una herramienta rápida para escanear vulnerabilidades de contaminación de prototipos del lado del cliente escrita en Rust. 🦀 Instalación Binario Fuente Dependencias Demostración Uso Básico Opciones Uso Materiales de apoyo Contribuciones Atribución...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

jspanda

JSPanda JSPanda es un escáner de vulnerabilidades de contaminación de prototipos del lado del cliente. Tiene dos características clave: escanear vulnerabilidades en las URLs proporcionadas y analizar el código fuente de las bibliotecas JavaScript. Sin embargo, JSPanda no puede detectar...

CVE-2026-78490

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Restriction of Excessive Authentication Attempts vulnerability in both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) editions. An unauthenticated attacker with network access could exploit thi...

PoC-CVE-2024-24035

CVE-2024-24035 Title The SIL 3.1 is vulnerable to Cross Site Scripting XSS in the "hmessage" parameter. Date: 2024-01-14 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.1 POC CVE-2024-24035 The "hmessage" parameter is vulnerable to DOM Based Cross Site...

pphack

pphack Advanced Client-Side Prototype Pollution Scanner Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Install 📡 Using Go root@kitploit:...

CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...