895 matches found
POC-GeoLeak-CVE-2026-52715
GeoLeak — PoC de CVE-2026-52715 Proof of Concept educativa de GeoLeak CVE-2026-52715, inyeccion SQL no autenticada CVSS 9.3 en el plugin GEO my WordPress = 4.5.5 para WordPress. Los parametros swlatlng y nelatlng de los limites del mapa se interpolan sin saneado en la clausula WHERE. Laboratorio...
Wordell
Wordell 🌐 Wordell es un potente script de enumeración de WordPress diseñado para hacer que tus evaluaciones de seguridad de WordPress sean más eficientes y completas. Te permite enumerar sitemaps, descubrir nombres de usuario, recopilar inicios de sesión de WordPress, tomar capturas de pantalla y...
Refloow-Geo-Forensics
📍 Refloow™ Geo Forensics Offizielles GitHub-Repository Professionelles Open-Source OSINT & Digital Forensics Tool Version 1.4.0 Latest: Version 1.0.0 Launch: Refloow™ Geo Forensics ist ein leistungsstarkes, quelloffenes digitales Forensik-Werkzeug, das für Ermittler, OSINT-Praktiker und...
shodan
Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...
TIGMINT
TIGMINT: Intelligence dei Media su Twitter, Instagram e Geo-Tagging Introduzione Un framework software OSINT Open Source Intelligence con l'obiettivo di rendere le indagini informatiche più convenienti implementando meccanismi di astrazione per nascondere la complessità tecnica di base, inoltre...
geo-recon
Geo-Recon Uno strumento OSINT CLI progettato per velocizzare la ricerca sulla reputazione IP e la geolocalizzazione per gli analisti di sicurezza. Prerequisiti per Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip Se non usi Debian o Ubuntu, cerca nelle rispettive...
geo-recon
Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...
webkiller
WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...
CVE-2024-52433
CVE-2024-52433 My Geo Posts Free = 1.2 - Iniezione di oggetti PHP non autenticata Descrizione Il plugin My Geo Posts Free per WordPress è vulnerabile all'iniezione di oggetti PHP nelle versioni fino alla 1.2 inclusa, tramite deserializzazione di input non attendibili. Ciò consente ad attaccanti n...
My Geo Posts Free <= 1.2 - PHP Object Injection
The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...
Geo Mashup <= 1.13.18 - SQL Injection
Geo Mashup WordPress plugin = 1.13.18 is vulnerable to time-based SQL injection via the sort parameter. The issue exists because the sort value is insufficiently sanitized in render-map.php/template tag code paths. id: CVE-2026-4060 info: name: Geo Mashup = 1.13.18 - SQL Injection author:...
Geo Mashup <= 1.13.17 - SQL Injection
Geo Mashup WordPress plugin = 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-2416 info: name: Geo Mashup = 1.13.17 - SQL Injection author: Shivam Kamboj...
WordPress IWS Geo Form Fields <=1.0 - SQL Injection
WordPress IWS Geo Form Fields plugin through 1.0 contains a SQL injection vulnerability. The plugin does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users. An attacker can possibly obtain sensitive information, modify data,...
vk-geosearch
vk-geosearch Suchen von Fotos nach Geo-Tags im sozialen Netzwerkvk.com Abhängigkeiten requests Installation root@kitploit: git clone https://github.com/yevgen2020/vk-geosearch.git pip3 install requests cd vk-geosearch chmod +x search.py Verwendung Für die Suche nach Fotos in VK wird ein...
CVE-2024-6330
CVE-2024-6330 GEO my WordPress = 4.5.0.1 - Inclusione di File Locale non autenticata Descrizione Il plugin GEO my WP per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 4.5.0.1 inclusa tramite il parametro 'forminfowindowtemplatecontentpath'. Ciò consente a...
CVE-2026-4060-PoC
CVE-2026-4060 — Geo Mashup ≤ 1.13.18 Iniezione SQL Non Autenticata PoC -blue Attaccanti non autenticati possono iniettare SQL arbitrario nella clausola ORDER BY tramite il parametro sort dell'endpoint render-map di Geo Mashup, consentendo l'estrazione blind basata sul tempo di informazioni...
CVE-2026-72816
A flaw was found in the go-chi/chi RealIP middleware. This vulnerability allows a remote attacker to perform IP spoofing by supplying arbitrary IP addresses in client-controlled headers. This can lead to bypassing IP-based access controls, evading rate limiting and geo-IP restrictions, and...
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
