895 matches found
webkiller
WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...
CVE-2024-52433
CVE-2024-52433 My Geo Posts Free = 1.2 - Iniezione di oggetti PHP non autenticata Descrizione Il plugin My Geo Posts Free per WordPress è vulnerabile all'iniezione di oggetti PHP nelle versioni fino alla 1.2 inclusa, tramite deserializzazione di input non attendibili. Ciò consente ad attaccanti n...
Wordell
Wordell 🌐 Wordell è un potente script di enumerazione di WordPress progettato per rendere le tue valutazioni di sicurezza su WordPress più efficienti e complete. Ti consente di enumerare le sitemap, scoprire nomi utente, raccogliere i login di WordPress, acquisire screenshot e generare indirizzi ...
Refloow-Geo-Forensics
📍 Repository Ufficiale Github di Refloow™ Geo Forensics Strumento Professionale Open-Source per OSINT e Digital Forensics Versione 1.4.0 Ultima: Versione 1.0.0 Lancio: Refloow™ Geo Forensics è uno strumento di digital forensics ad alte prestazioni e open-source progettato per investigatori,...
vk-geosearch
vk-geosearch Suchen von Fotos nach Geo-Tags im sozialen Netzwerkvk.com Abhängigkeiten requests Installation root@kitploit: git clone https://github.com/yevgen2020/vk-geosearch.git pip3 install requests cd vk-geosearch chmod +x search.py Verwendung Für die Suche nach Fotos in VK wird ein...
TIGMINT
TIGMINT: Intelligence dei Media su Twitter, Instagram e Geo-Tagging Introduzione Un framework software OSINT Open Source Intelligence con l'obiettivo di rendere le indagini informatiche più convenienti implementando meccanismi di astrazione per nascondere la complessità tecnica di base, inoltre...
geo-recon
Geo-Recon Ein OSINT-CLI-Tool, das für Security-Analysten die Überprüfung von IP-Reputation und Geolokalisierung beschleunigt. Voraussetzungen für Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip Wenn Sie nicht Debian oder Ubuntu verwenden, suchen Sie nach den...
geo-recon
Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...
CVE-2024-6330
CVE-2024-6330 GEO my WordPress = 4.5.0.1 - Inclusione di File Locale non autenticata Descrizione Il plugin GEO my WP per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 4.5.0.1 inclusa tramite il parametro 'forminfowindowtemplatecontentpath'. Ciò consente a...
My Geo Posts Free <= 1.2 - PHP Object Injection
The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...
Geo Mashup <= 1.13.18 - SQL Injection
Geo Mashup WordPress plugin = 1.13.18 is vulnerable to time-based SQL injection via the sort parameter. The issue exists because the sort value is insufficiently sanitized in render-map.php/template tag code paths. id: CVE-2026-4060 info: name: Geo Mashup = 1.13.18 - SQL Injection author:...
WordPress IWS Geo Form Fields <=1.0 - SQL Injection
WordPress IWS Geo Form Fields plugin through 1.0 contains a SQL injection vulnerability. The plugin does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users. An attacker can possibly obtain sensitive information, modify data,...
Geo Mashup <= 1.13.17 - SQL Injection
Geo Mashup WordPress plugin = 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-2416 info: name: Geo Mashup = 1.13.17 - SQL Injection author: Shivam Kamboj...
shodan
Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...
CVE-2026-4060-PoC
CVE-2026-4060 — Geo Mashup ≤ 1.13.18 Iniezione SQL Non Autenticata PoC -blue Attaccanti non autenticati possono iniettare SQL arbitrario nella clausola ORDER BY tramite il parametro sort dell'endpoint render-map di Geo Mashup, consentendo l'estrazione blind basata sul tempo di informazioni...
POC-GeoLeak-CVE-2026-52715
GeoLeak — PoC de CVE-2026-52715 Proof of Concept educativa de GeoLeak CVE-2026-52715, injeção SQL não autenticada CVSS 9.3 no plugin GEO my WordPress = 4.5.5 para WordPress. Os parâmetros swlatlng e nelatlng dos limites do mapa são interpolados sem saneamento na cláusula WHERE. Laboratório Docker...
CVE-2026-72816
A flaw was found in the go-chi/chi RealIP middleware. This vulnerability allows a remote attacker to perform IP spoofing by supplying arbitrary IP addresses in client-controlled headers. This can lead to bypassing IP-based access controls, evading rate limiting and geo-IP restrictions, and...
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
