CVE-2023-22515

CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization → allows an attacker to remotely create an admi...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. Preview How to use ? git clone...

SharePointDumper

SharePointDumper SharePointDumper is a PowerShell-based extraction and auditing utility that enumerates SharePoint sites a user can access via Microsoft Graph and downloads files via SharePoint. It is designed for SOC / DLP testing, purple teaming, and non-sophisticated red-team assessments, and...

malicious-pdf

Générateur de PDF malveillant ☠️ Génère 67 fichiers PDF de test malveillants pour tester les rappels phone-home, les SSRF, XSS, XXE, le vol d'identifiants NTLM, et l'exfiltration de données dans les visualiseurs PDF, les convertisseurs et les applications web. Peut être utilisé avec Burp...

AI-SPM

Orbyx AI SPM - Gestión de Postura de Seguridad de IA La gestión de postura de seguridad de IA AI-SPM es un enfoque integral para mantener la seguridad e integridad de los sistemas de inteligencia artificial IA y aprendizaje automático ML. Implica la monitorización, evaluación y mejora continua de...

CVE-2023-33409

CVE-2023-33409 Minical 1.0.0 is vulnerable to Cross-Site Request Forgery. Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC The application does not have any CSRF protection, hence a specially crafted HTTP request can be used to, Add New User Delete Existin...

sigma-ai

Reglas Sigma de AgentShield ¿Qué es este repositorio? Este repositorio contiene reglas de detección que ayudan a identificar cuándo un agente de IA está siendo atacado o manipulado. Piense en ello como una biblioteca de "firmas de amenazas": cada regla describe un patrón que, al coincidir con los...

kalici-dosya-silme-araci

Permanent File Deletion Tool & Kalıcı Dosya Silme Aracı Este proyecto es una herramienta simple que permite a los usuarios eliminar permanentemente archivos específicos. El programa sobrescribe el archivo especificado con datos aleatorios, cambia el contenido del archivo y luego lo elimina,...

Microsoft-Edge-Information-Disclosure

Microsoft-Edge-Information-Disclosure CVE-2024-30056 Microsoft Edge Chromium-based Information Disclosure Vulnerability This is a vulnerability in Microsoft Edge Chromium-based. The attacker was able to trick the user into revealing sensitive information without his knowledge. Poc: PoC...

CVE-2022-26134

CVE-2022-26134 Remote attackers, without authentication, can construct OGNL expressions for injection, achieving arbitrary code execution on Confluence Server or Data Center. Modified PoC for easy get shell. Common port: 8090 Affected Versions Confluence Server and Data Center = 1.3.0 7.14.0 =...

CVE-2022-29337

CVE-2022-29337 C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...

GDir-Thief

GDir-Thief Herramienta de Red Team para exfiltrar el directorio de personas de Google de la organización objetivo al que tengas acceso, a través de la API de People de Google. CÓMO HACERLO Crear un nuevo proyecto de Google Cloud Platform GCP Pasos para obtener el Token de Acceso a la API de Googl...

msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 Outil de traversée de chemin WinRAR ⚠ Cet outil est créé uniquement à des fins éducatives. Toute utilisation non autorisée en dehors d'environnements contrôlés est strictement interdite. Un script Python qui exploite CVE-2025-8088, une vulnérabilité de traversée de chemin dans WinRA...

Langflow - Broken Access Control

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

DomainMOD <=4.13.0 - Cross-Site Scripting

DomainMOD through 4.13.0 contains a cross-site scripting vulnerability via /reporting/domains/cost-by-month.php in Daterange parameters. id: CVE-2019-15811 info: name: DomainMOD =4.13.1 to mitigate this vulnerability. reference: - https://www.exploit-db.com/exploits/47325 -...

Garage Management System 1.0 - SQL Injection

Garage Management System 1.0 contains a SQL injection vulnerability in /login.php via manipulation of the argument username with input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT. An attacker can possibly obtain sensitive information from a database, modify data, and/or execut...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam. id: CVE-2022-31977 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to SQ...

Seo Panel 4.8.0 - Cross-Site Scripting

Seo Panel 4.8.0 contains a reflected cross-site scripting vulnerability via the seo/seopanel/login.php?sec=forgot email parameter. id: CVE-2021-3002 info: name: Seo Panel 4.8.0 - Cross-Site Scripting author: edoardottt severity: medium description: Seo Panel 4.8.0 contains a reflected cross-site...

74cms - ajax_officebuilding.php SQL Injection

A SQL injection vulnerability exists in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php. id: CVE-2020-22210 info: name: 74cms - ajaxofficebuilding.php SQL Injection author: ritikchaddha severity: critical description: | A SQL injection vulnerability exists in 74cms 3.2.0 via the x...