30824 matches found
database-sentinel
🛡️ Database Sentinel Security audits for your database backend. Ask "audit my database" and get a scored report with exact fix code. Works as a Claude Skill Supabase, MongoDB, a read-only MCP server for any AI client, or a CLI agent that uses your own model both Supabase. →MCP server setup and...
CVE-2022-43959
CVE-2022-43959 Bitrix Vulnerability CVE-2022-43959 Description Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 AD/LDAP connector module before version 23.100.0 allow remote administrators to discover an AD/LDAP administrative password by reading the sourc...
WordPress Fundiin cho WooCommerce plugin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure vulnerability
Unauthenticated Payment Gateway Settings Update and Credential Disclosure vulnerability discovered by ? in WordPress Plugin Fundiin cho WooCommerce versions = 3.4.0...
CVE-2018-9995_dvr_credentials
Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials Modify" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Modify 28/04/2024 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa & batmoshka55 Exploit...
CVE-2024-28999
CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console login page Technical Details:...
cve-2024-23897-jenkins_lfi_reproduction
CVE-2024-23897 — Jenkins CLI Arbitrary File Read Vulnerability CVSS 9.8 CRITICAL — Actively exploited in the wild Overview CVE-2024-23897 is a critical arbitrary file read vulnerability in Jenkins' command-line interface CLI. The Jenkins CLI uses the args4j library for parsing command arguments...
CVE-2023-30367-mRemoteNG-password-dumper
mRemoteNG = v1.77.3.1784-NB Password Dumper CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an...
CVE-2025-29705
CVE-2025-29705 CVE-2025-29705 Introduction code-gen: A code generation tool that allows custom templates to generate different code, supporting MySQL, Oracle, SQL Server, PostgreSQL https://gitee.com/durcframework/code-gen This project has no access control, allowing anyone to freely access such...
CVE-2021-21975
Impacted Products VMware vRealize Operations 8.3.0、8.2.0、8.1.1、8.1.0、7.5.0 VMware Cloud Foundation 4.x、3.x vRealize Suite Lifecycle Manager 8.x Description On March 31, 2021, VMware officially released the risk notice of vmsa-2021-0004. The vulnerability numbers are cve-2021-21975 and...
OracleOTM
OracleOTM Python tool for exploiting CVE-2021-35616 The script works in modules, which I implemented in the following order: ► Username enumeration ► Search for default credentials ► Run an SQL query using DBXML servlet ► Full exploitation and JSP execution The syntax of the script is as follows:...
CVE-2022-0739
CVE-2022-0739 Python PoC Exploit for CVE-2022-0739 Features Database Metadata Lookup Wordpress User Credential Dump Arbitrary Blind Query Injection 💉 Usage usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help message and exit -u URL, --url URL URL of the page containing the...
npm-incident-response
npm-incident-response English | Português Standalone scanner for the keyv/cacheable supply-chain incident "Shai-Hulud: Here We Go Again", Aug 4 2026 — 440+ npm packages compromised by a self-propagating worm that steals cloud/CI credentials and plants persistence with a dead-man's switch. Detects...
CVE-2017-14262
SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd First, get the MD5 hash password of the 'admin' account. Send: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6.3...
CVE-2024-39090-PoC
CVE-2024-39090 PoC Exploit Script This PoC script exploits CVE-2024-39090, a CSRF to Stored XSS vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates CSRF attacks to inject persistent JavaScript payloads, which execute when a privileged user accesses the affected page, enabling...
CVE-2023-23397_EXPLOIT
CVE-2023-23397 MS Outlook Vulnerability Exploitation CVE-2023-23397 is a vulnerability in Microsoft Outlook that allows an attacker to potentially exfiltrate user authentication details. The vulnerability stems from the ability of an attacker to specify a Universal Naming Convention UNC path in t...
CVE-2018-9995-DVR-Credentials-Extractor
Tool show DVR Credentiales Original Tool: https://github.com/ezelf/CVE-2018-9995dvrcredentials Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel...
pwn-pulse
pwn-pulse.sh Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability CVE-2019-11510 Script authored by braindead @BishopFox. Based on research by Orange Tsai and Meh Chang. Thanks also to Alyssa Herrera and 0xDezzy for additional insights. Huge thanks to bl4ckh0l3z for fixing,...
nuclei-CiscoRV320Dump-CVE-2019-1653
Cisco Router Configuration Exposure Vulnerability Vulnerability Description This repository details the exploitation process of a vulnerability in certain Cisco routers that allows exposure of the config.exp configuration file via an accessible public URL. This file may contain sensitive...
lazarus-sigma-rules
Lazarus Sigma Rules The Sigma rules in this repository were created by the F-Secure Countercept Detection and Response Team to provide detection coverage for the Tools, Techniques and Procedures recently used by the Lazarus Group. The blog posts discussing the creation of these Sigma rules can be...