61 matches found
DSSS
Damn Small SQLi Scanner डैम स्मॉल SQLi स्कैनर DSSS एक पूर्ण कार्यात्मक SQL इंजेक्शन भेद्यता स्कैनर है GET और POST पैरामीटर का समर्थन करता है जो 100 लाइनों से कम कोड में लिखा गया है। वैकल्पिक सेटिंग्स के रूप में यह HTTP प्रॉक्सी के साथ HTTP हेडर मान User-Agent, Referer और Cookie का समर्थन करता है।...
DSXS
ماسح XSS الصغير جداً ماسح XSS الصغير جداً DSXS هو أداة فحص كاملة الوظائف لثغرات البرمجة عبر المواقع تدعم وسائط GET و POST مكتوبة بأقل من 100 سطر من الكود. كإعدادات اختيارية، يدعم الوكيل HTTP بالإضافة إلى قيم رأس HTTP User-Agent و Referer و Cookie...
wreckuests
Qu'est-ce que c'est ? Wreckuests est un script qui vous permet d'exécuter des attaques DDoS avec HTTP-flood GET/POST. Il est écrit en Python pur et utilise des serveurs proxy comme « bots ». BIEN SÛR, ce script n'est pas universel et vous ne pouvez pas faire tomber le site du Pentagone/NSA/autre...
SCANNER-INURLBR
नया रिपॉजिटरी सर्च इंजनों में उन्नत खोज, विश्लेषण प्रदान करता है जो GET / POST के माध्यम से ईमेल और URL कैप्चर करने का शोषण करने में सक्षम बनाता है, प्रत्येक लक्ष्य/पाए गए URL के लिए एक आंतरिक कस्टम सत्यापन जंक्शन के साथ। https://github.com/MrCl0wnLab/SCANNER-INURLBR...
CVE-2025-55182-burpscanner
CVE-2025-55182-burpscanner Plugin de scan passif BurpSuite basé sur la détection de la vulnérabilité CVE-2025-55182, utilisant JDK 17 Utilisation du plugin : Scan par défaut de l'historique / Scan actif par clic droit, la détection d'une vulnérabilité bascule automatiquement vers le module...
ghauri
Like Ghauri, consider supporting the developer...
s3cXSSer
s3cXSSer यह एक्सटेंशन आपको किसी भी वेबसाइट पर GET/POST आधारित XSS कमजोरी का आसानी से पता लगाने में मदद करेगा। S3C - XSSER - क्रोम एक्सटेंशन इसे Chrome या Brave ब्राउज़र में कैसे जोड़ें 1- brave://extensions/ या chrome://extensions/ पर जाएं 2- डेवलपर मोड सक्षम करें और Load unpacked पर क्लिक करें 3...
CVE-2026-14195
Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...
CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...
UFONet 2.0
UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...
PT-2026-40896
Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...
CVE-2026-41271 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...
CVE-2026-2654
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure
The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...
PT-2026-3217
The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the api get post summary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-leve...
PT-2025-53364
Name of the Vulnerable Software and Affected Versions Microhard Systems IPn4G version 1.1.0 Description The software contains an authentication bypass that allows authorized attackers to read, modify, or delete arbitrary files. The issue resides in the hidden system-editor.sh script. Attackers ca...
SqlScanner
SqlScanner SQL Injection Scanner deve...
CVE-2025-64048
YCCMS 3.4 contains a stored cross-site scripting XSS vulnerability in the article management functionality. The vulnerability exists in the add and getPost functions within the ArticleAction.class.php file due to improper neutralization of user input in the article title field...
