Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. id: CVE-2023-6592 info: name: WordPress FastDup = 2.1.9 Sensitive Information Exposure -...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

ResourceSpace - Metadata Export

In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value. id: CVE-2022-31260 info: name: ResourceSpace - Metadata Export author: ritikchaddha severity: medium description: | In Montala ResourceSpace...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

RazerEoP

RazerEoP Razer Synapse 3 宏模块中任意文件删除/移动的 PoC。 该模块允许用户将创建的宏导出到磁盘上的文件，文件操作由以 nt authority\system 身份运行的 razer 服务完成。 我尝试通过他们的 BB 计划向 razer 报告此问题，得到的回复是这不是一个 bug，而是一个漏洞 🤣。 随后我将其报告给 HackerOne，但由于报告年代久远，该报告被以 Informative 状态关闭。 受影响版本 为 3.7.1209.121307 及以下。 任意删除...

burp-exporter

Burp Suite（社区版和专业版）的 Exporter 扩展 关注我们以了解更多技巧和其他扩展 描述 Exporter 是一个 Burp Suite 扩展，用于将请求复制到文件 或剪贴板 ，格式为多种编程语言函数。它还添加了一个名为 Exporter 的标签页，你可以在其中搜索 HTTP 请求。 你可以导出为以下格式： cURL Wget Python Request Perl LWP PHP HTTPRequest2 Go Native NodeJS Request jQuery AJAX PowerShell HTML Forms Ruby Net::HTTP JavaScrip...

CVE-2025-1913-PoC

CVE-2025-1913 -- Prueba de Concepto PoC Este repositorio contiene una Prueba de Concepto PoC solo con fines educativos para CVE-2025-1913 , creada por Suhaib518 🇸🇦. Esta PoC demuestra cómo una entrada de PHP serializada especialmente diseñada puede desencadenar lógica vulnerable en componentes de...

EATGuard

EATGuard Implementation of an export address table protection mitigation, like Export Address Filtering EAF How It Works This project is composed of three binaries that, when compiled, can be found in EATGuard\bin. They are: 1. EATGuardApplication.exe - "Malicious" application that loads...

CVE-2024-24135

CVE-2024-24135：产品库存与导出到Excel - 跨站脚本 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24135.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24135/blob/main/CVE-2024-24135.md...

CVE-2026-50553

Note Mark (open-source Go note-taking app, module github.com/enchant97/note-mark/backend) is vulnerable to a path traversal in its data-export CLI commands (migrate export and migrate export-v1) prior to version 0.19.5 . The root cause is an unanchored regex ([a-z0-9-]+) used to validate book and...

CVE-2026-50553 Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)

Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"a-z0-9-+". huma compiles this with regexp.MustCompiles.Pattern and tests it with patternRe.MatchStringstr, an UNANCHORED match. Because th...

zoneminder-rce-poc

solo espera y verás Prueba de concepto para una vulnerabilidad de inyección de comandos del sistema operativo en la funcionalidad de exportación de eventos de ZoneMinder web/includes/downloadfunctions.php. Los nombres de los monitores se interpolan directamente en comandos de shell utilizando un...

CVE-2026-85588

phpMyFAQ versions before 4.1.8 embed live TOTP shared secrets in plaintext inside user data export ZIP files. An attacker who obtains an exported archive can extract the TOTP seed and generate valid one-time codes, effectively bypassing two-factor authentication . The CVSS 4.0 base score is 5.3 (...

quokka

Quokka 图像由 DALL-E 生成 目录 简介 安装 使用 构建 文档 常见问题 简介 Quokka 是一个二进制导出器：它从程序的反汇编结果生成一个导出文件，无需反汇编器即可使用。目前它支持 IDA Pro 、Ghidra 和 Binary Ninja 作为反汇编后端。 Quokka 的主要目标是让用户能够在初始导出之后，无需再打开反汇编器即可完全操控二进制文件。此外，它抽象了反汇编器的 API，向用户提供简洁的接口。 Quokka 深受 BinExport 的启发，BinExport 是 BinDiff 所使用的二进制导出器。 架构 root@kitploit: IDA Pro...

import-users-from-csv-with-meta

import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - 未授权认证用户导出...

ninja-forms-brute

Ninja Forms 3.6.8 - 未认证的电子邮件地址泄露 描述 该插件在导出提交内容时不会删除所创建的临时文件，这可能导致未经认证的攻击者在文件可公开访问且名称可猜测的情况下下载这些文件，并获取诸如提交表单用户的电子邮件地址等敏感信息。 概念验证 通过“下载所有提交”按钮导出所有提交时生成的 CSV 文件存储在 /wp-content/uploads// 文件夹中，格式如下：form--all-subs.csv 示例：https://example.com/wp-content/uploads/2022/03/form-1-all-subs.csv 如何运行...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - 未认证的 SQL 注入 描述 WordPress 的 Navayan CSV Export 插件在 1.0.9（含）及之前版本中存在 SQL 注入漏洞，原因是用户提供的参数转义不足，且现有 SQL 查询缺乏充分的预处理。这使得未认证的攻击者能够在现有查询中追加额外的 SQL 查询，从而从数据库中提取敏感信息。 详细信息 类型 ：插件 Slug ：navayan-csv-export 受影响版本 ：1.0.9 CVSS 分数 ：9.8 CVSS 评级 ：严重 CVSS 向量...