shotlooter

Introdução A ferramenta Shotlooter foi desenvolvida para encontrar dados sensíveis dentro das capturas de tela enviadas para https://prnt.sc/ através do software LightShot aplicando métodos de OCR e processamento de imagem. +-------------------+ IMAGE FILE |!/usr/bin/python | +-------------------...

CVE-2024-41290

CVE-2024-41290 FlatPress CMS v1.3.1 1.3 को प्रमाणीकरण डेटा संग्रहीत करने के लिए असुरक्षित तरीकों का उपयोग करते पाया गया Additional Information: FlatPress CMS संस्करण 1.3.1 प्रमाणीकरण-संबंधित डेटा, जिसमें उपयोगकर्ता नाम और हैश किए गए पासवर्ड शामिल हैं, को सीधे क्लाइंट-साइड कुकीज़ में असुरक्षित रूप...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 अपने सभी heroku ऐप्स की जांच करें कि क्या वे Rails का संकटग्रस्त संस्करण चला रहे हैं पृष्ठभूमि Ruby on Rails फ्रेमवर्क में एक गंभीर सुरक्षा भेद्यता पाई गई है। यह शोषण Rails संस्करण 2.3 और 3.0 चलाने वाले लगभग सभी अनुप्रयोगों को प्रभावित करता है, और इसके लिए एक पैच उपलब्ध कराया...

kitty

Introduction | Sulley: Boo? | Boo: Kitty! What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in python, inspired by OpenRCE's Sulley and Michael Eddington's and now Deja Vu Security's Peach Fuzzer . Goal When we started writing Kitty, our goal was to help us...

mhf

Mobile Helper Framework é uma ferramenta que automatiza o processo de identificação do framework/tecnologia usada para criar uma aplicação móvel. Além disso, auxilia na localização de informações sensíveis ou fornece sugestões para trabalhar com a plataforma identificada. Como funciona? A...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 डेटा एक्सट्रैक्टर बिल्ड git clone https://github.com/JohnDoeAnonITA/CVE-2023-23752 cd CVE-2023-23752 go build . उपयोग CVE-2023-23752.exe -h|--help -u|--url "" -t|--type 1|2 सहायता / / / | // //// // //.'///'/ // //// / CVE-2023-23752 डेटा एक्सट्रैक्टर v0.1 तर्क: -h...

Veritensor

🛡️ Veritensor: Segurança de Dados e Artefatos de IA Veritensor é o antivírus para artefatos de IA e o firewall definitivo para pipelines RAG. Ele protege toda a cadeia de suprimentos de IA ao escanear os artefatos que as ferramentas SAST tradicionais não detectam: modelos, conjuntos de dados,...

CVE-2021-32789

CVE-2021-32789 Injeção SQL cega autenticada. Plugin Wordpress woocommerce versões = 2.5.0 Instalação git clone https://github.com/DonVorrin/CVE-2021-32789.git cd CVE-2021-32789 sudo pip install -r requirements.txt Exploração python3 exploit.py Enter URL: Example: http://exploit.cve/ Enter number:...

CVE-2026-66435 WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...

CVE-2026-66435

The WP Rollback WordPress plugin (versions 3.1.2 and below ) is vulnerable to an Insertion of Sensitive Information Into Sent Data (CWE-201) vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . Specific technical details regarding the root cause or affected functions ...

EUVD-2026-96326

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...

CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...

EUVD-2026-96323

Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...

CVE-2026-94676

The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...

CVE-2026-105885 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...

EUVD-2026-96322

Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...

CVE-2026-105885

The Slider by 10Web WordPress plugin (versions

BLE-TPMS

CVE-2024-39081 Link: https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS para bicicletas Aqui, realizamos e explicamos a manipulação de dados do TPMS via bluetooth. Podemos enviar falsos alarmes ao utilizador da App via bluetooth. Descobertas detalhadas de vulnerabilidades e análises estã...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

XSS-Catcher

XSS Catcher Uma framework de detecção de XSS cego e captura de dados XSS que roda em Flask, VueJS e PostgreSQL. XSS Catcher é uma ferramenta intuitiva que automatiza ataques de Cross-Site Scripting XSS cego e coleta de dados, incluindo capturas de tela. Conta com um gerador de payloads fácil de...