63 matches found
DSSS
Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS est un scanner de vulnérabilité d'injection SQL entièrement fonctionnel supportant les paramètres GET et POST écrit en moins de 100 lignes de code. En ce qui concerne les paramètres optionnels, il supporte le proxy HTTP ainsi que les valeurs...
CVE-2025-55182-burpscanner
CVE-2025-55182-burpscanner Plugin de scan passif BurpSuite basé sur la détection de la vulnérabilité CVE-2025-55182, utilisant JDK 17 Utilisation du plugin : Scan par défaut de l'historique / Scan actif par clic droit, la détection d'une vulnérabilité bascule automatiquement vers le module...
DSXS
Damn Small XSS Scanner Damn Small XSS Scanner DSXS est un scanner de vulnérabilités Cross-site scripting entièrement fonctionnel prenant en charge les paramètres GET et POST écrit en moins de 100 lignes de code. En ce qui concerne les paramètres optionnels, il prend en charge le proxy HTTP ainsi...
SCANNER-INURLBR
Nouveau dépôt Recherche avancée dans les moteurs de recherche, permet une analyse fournie pour exploiter GET / POST en capturant les emails et URLs, avec une jonction de validation personnalisée interne pour chaque cible / URL trouvée. https://github.com/MrCl0wnLab/SCANNER-INURLBR...
wreckuests
Что это? Wreckuests — это скрипт, который позволяет запускать DDoS-атаки с помощью HTTP-флуда GET/POST. Он написан на чистом Python и использует прокси-серверы в качестве «ботов». КОНЕЧНО, этот скрипт не универсален, и вы не сможете просто одним щелчком мыши положить сайт Пентагона/АНБ/чего угодн...
doser.go
doser.go DoS-инструмент для HTTP-запросов вдохновлён hulk, но с большим функционалом, написанный на Go: Как использовать? 1. Скомпилируйте его root@kitploit: go build doser.go 2. Используйте его Например: 999 потоков отправляют GET-запросы. P.S: Пожалуйста, не атакуйте мой сайт по-настоящему...
ghauri
Like Ghauri, consider supporting the developer...
s3cXSSer
s3cXSSer Это расширение поможет вам легко обнаруживать XSS-уязвимости на основе GET/POST на любом веб-сайте. S3C - XSSER - расширение для Chrome Как добавить его в Chrome или Brave 1- Перейдите на brave://extensions/ или chrome://extensions/ 2- включите режим разработчика и нажмите «Загрузить...
EUVD-2026-66132
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...
CVE-2026-14195
Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...
CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...
UFONet 2.0
UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...
PT-2026-40896
Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...
CVE-2026-41271 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...
CVE-2026-2654
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure
The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...
PT-2026-3217
The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the api get post summary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-leve...
PT-2025-53364
Name of the Vulnerable Software and Affected Versions Microhard Systems IPn4G version 1.1.0 Description The software contains an authentication bypass that allows authorized attackers to read, modify, or delete arbitrary files. The issue resides in the hidden system-editor.sh script. Attackers ca...
