SCANNER-INURLBR

Nuevo repositorio Búsqueda avanzada en motores de búsqueda, permite el análisis proporcionado para explotar GET/POST capturando correos electrónicos y urls, con una unión de validación personalizada interna para cada objetivo/url encontrada. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS es un escáner de vulnerabilidades de Cross-site scripting completamente funcional compatible con parámetros GET y POST escrito en menos de 100 líneas de código. En cuanto a configuraciones opcionales, admite proxy HTTP junto con los valores de...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS es un escáner de vulnerabilidades de inyección SQL completamente funcional que soporta parámetros GET y POST escrito en menos de 100 líneas de código. En cuanto a las configuraciones opcionales, soporta proxy HTTP junto con los valores de...

wreckuests

¿Qué es esto? Wreckuests es un script que te permite ejecutar ataques DDoS con inundación HTTP GET/POST. Está escrito en Python puro y utiliza servidores proxy como "bots". POR SUPUESTO, este script no es universal y no puedes simplemente tumbar el sitio web del Pentágono/NSA/lo que sea con un so...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner Plugin de escaneo pasivo de burpsuite basado en la detección de la vulnerabilidad CVE-2025-55182, usando JDK 17 Uso del plugin: Escaneo predeterminado del historial / escaneo activo con clic derecho, al detectar una vulnerabilidad se dirige automáticamente al módulo...

s3cXSSer

s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...

doser.go

doser.go DoS tool for HTTP requests inspired by hulk but has more functionalities written in Go: How to use? 1. Compile it go build doser.go 2. Use it For example: 999 threads sends GET requests. P.S: Do not really attack my website pls ./doser -t 999 -g 'https://stylish-bear.ru' Usage Usage of...

PT-2026-99376

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.19.1 Description An issue exists where the legacy apiCall service executor pkg/engine/apicall/executor.go and the GlobalContextEntry external-API path do not apply the default egress blocklist or scoped-token...

EUVD-2026-66132

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...

CVE-2026-14195

The Brizy WordPress plugin, in versions prior to 2.8.18 , contains an authorization bypass vulnerability. The flaw exists in a request handler that fails to properly verify permissions before returning post content. This allows users with a Contributor role or higher to access and read arbitrary ...

CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

UFONet 2.0

UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...

PT-2026-40896

Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...

CVE-2026-41271 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...

CVE-2026-2654

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-52022: Generation of Error Message Containing Sensitive Information

A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially crafted HTTP GET/POST requests are sent to publ...

CVE-2025-52023: Generation of Error Message Containing Sensitive Information

A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially crafted HTTP GET/POST requests are sent to public A...

CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...