CSPBypass

CSP Bypass Bienvenido a CSPBypass.com , una herramienta diseñada para ayudar a los hackers éticos a eludir Políticas de Seguridad de Contenido CSP restrictivas y explotar vulnerabilidades XSS Cross-Site Scripting en sitios donde las inyecciones están bloqueadas por CSP que solo permiten ciertos...

www-community

OWASP Community Pages OWASP Community Pages es un repositorio para contribuciones comunitarias de contenido relacionado con la seguridad. Los documentos aquí crean el sitio web en https://owasp.org/www-community/. Contribuir Damos la bienvenida a contribuciones de nuevo contenido y actualizacione...

CVE-2025-24893

PoC para CVE-2025-24893 — Ejecución Remota de Código en XWiki PoC Seguro PoC para CVE-2025-24893: Exploit de Ejecución Remota de Código en XWiki para versiones anteriores a 15.10.11 , 16.4.1 y 16.5.0RC1. ⚠️ IMPORTANTE — SOLO PRUEBAS AUTORIZADAS Este repositorio contiene un proyecto de prueba de...

paskto

Paskto - 被动式Web扫描器 Paskto 将使用 Common Crawl 互联网索引被动扫描Web，既可以按需下载索引，也可以解析本地系统中的数据。URL 随后通过 Nikto 和已知 URL 列表进行处理，以识别感兴趣的内容。哈希签名也用于识别某些物联网设备或Web应用程序的已知默认内容。 root@kitploit: 选项 -d, --dir-input directory 包含 Common Crawl 索引文件（.gz 扩展名）的目录。例如：-d "/tmp/cc/" -v, --ia-dir-input directory 包含互联网档案馆索引文件（.gz...

citrixmash_scanner

CVE-2019-19781 citrixmash 扫描器 一个用于检查易受 CVE-2019-19781 攻击的 Citrix 设备的多线程扫描器。 该扫描器不会尝试入侵/利用主机，并避免下载任何敏感内容。使用 HEAD 请求判断目标是否易受攻击。通过验证 Content-Length 响应头中的特定值来减少误报。 citrixmashscanner 既支持接收网络范围，也支持接收单个主机。 安装 root@kitploit: $ go get -u github.com/x1sec/citrixmashscanner 或者，可在 此处 获取适用于 Windows、Mac 和 Linu...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117 ¿Cómo funciona? Clona este repositorio de forma recursiva. La frase 「うんこもりもり」que significa algo como "Un montón de mierda" se mostrará en tu terminal. root@kitploit: $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.gi...

wahh_extras

wahhextras 《Web应用黑客手册》- 额外内容 对于所有读过《Web应用黑客手册第二卷》的人来说，书中提到了很多额外资源、问题和源代码，但不容易找到。我在此仓库中收集了所有这些内容。 目录 Web应用渗透测试 书籍索引 答案 第2章 - 核心防御机制 第3章 - Web应用技术 第4章 - 映射应用 第5章 - 绕过客户端控制 第6章 - 攻击认证 第7章 - 攻击会话管理 第8章 - 攻击访问控制 第9章 - 攻击数据存储 第10章 - 攻击后端组件 第11章 - 攻击应用逻辑 第12章 - 攻击用户：跨站脚本 第13章 - 攻击用户：其他技术 第14章 - 自动化定制攻击...

WordPress Ultimate FAQs <= 1.8.24 – Unauthenticated HTML Content Injection

Functions/EWDUFAQImport.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection. id: CVE-2019-17233 info: name: WordPress Ultimate FAQs = 1.8.24 – Unauthenticated HTML Content Injection author: daffainfo severity: medium description: | Functions/EWDUFAQImport.ph...

WP Content Permission <= 1.2 - Cross-Site Scripting

The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ohmem-message' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

LolLMS < 2.2.0 - Server-Side Request Forgery

A Server-Side Request Forgery SSRF vulnerability exists in parisneo/lollms versions prior to 2.2.0. The /api/files/export-content endpoint processes Markdown image URLs by downloading them via downloadimagetotemp in backend/routers/files.py without any validation, allowing an unauthenticated...

Masa CMS - Authentication Bypass

Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

Calibre <= 7.14.0 Arbitrary File Read

Arbitrary file read via Calibre’s content server in Calibre = 7.14.0. id: CVE-2024-6781 info: name: Calibre = 7.14.0 Arbitrary File Read author: DhiyaneshDK severity: high description: | Arbitrary file read via Calibre’s content server in Calibre = 7.14.0. impact: | Attackers can exploit the...

LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/loadcontentviaajax which allows arbitrary callback execution of...

Zimbra Collaboration Suite - Cross-site Scripting

Cross-site scripting XSS vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite ZCS before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment. id:...

PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection

PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection blind via the sbcategory parameter. id: CVE-2021-36748 info: name: PrestaHome Blog for PrestaShop 1.7.8 - SQL Injection author: whoever severity: high description: PrestaHome Blog for PrestaShop prior to versio...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

Oracle Content Server - Cross-Site Scripting

Oracle Content Server version 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0 are susceptible to cross-site scripting. The vulnerability can be used to include HTML or JavaScript code in the affected web page. The code is executed in the browser of users if they visit the manipulated site. id: CVE-2017-100...