DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS — это полностью функциональный сканер уязвимостей межсайтового скриптинга поддерживающий GET и POST параметры, написанный менее чем в 100 строках кода. Что касается дополнительных настроек, он поддерживает HTTP-прокси вместе со значениями...

SCANNER-INURLBR

Новый репозиторий Расширенный поиск в поисковых системах обеспечивает анализ для эксплуатации GET/POST, захватывая email и URL-адреса, с внутренним пользовательским механизмом проверки для каждой цели/найденного URL. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

s3cXSSer

s3cXSSer 이 확장 프로그램은 모든 웹사이트에서 GET/POST 기반 XSS 취약점을 쉽게 탐지할 수 있도록 도와줍니다. S3C - XSSER - Chrome 확장 프로그램 Chrome 또는 Brave 브라우저에 추가하는 방법 1- brave://extensions/ 또는 chrome://extensions/로 이동합니다. 2- 개발자 모드를 활성화하고 Load unpacked를 클릭합니다. 3- 확장 프로그램 폴더를 찾아 Ok를 클릭합니다. 공지: 기본적으로 이 확장 프로그램은 모든 웹사이트에서 실행됩니다. 특정 대상...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS — это полнофункциональный сканер уязвимостей SQL-инъекций поддерживает параметры GET и POST, написанный менее чем в 100 строках кода. Что касается дополнительных настроек, он поддерживает HTTP-прокси вместе со значениями HTTP-заголовков...

wreckuests

Что это? Wreckuests — это скрипт, который позволяет запускать DDoS-атаки с помощью HTTP-флуда GET/POST. Он написан на чистом Python и использует прокси-серверы в качестве «ботов». КОНЕЧНО, этот скрипт не универсален, и вы не сможете просто одним щелчком мыши положить сайт Пентагона/АНБ/чего угодн...

doser.go

doser.go Go로 작성된 HTTP 요청용 DoS 도구hulk에서 영감을 받았지만 더 많은 기능 포함: 사용 방법? 1. 컴파일하기 go build doser.go 2. 사용하기예: 999개의 스레드가 GET 요청을 보냄. 참고: 제 웹사이트를 실제로 공격하지 마세요 ./doser -t 999 -g 'https://stylish-bear.ru' 사용법 Usage of ./doser: -h -g G -p P -d D -ah AH -t T 선택적 인자: -h, --help 도움말 메시지를 표시하고 종료합니다. -g GET 요청...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner Пассивный сканирующий плагин Burp Suite для обнаружения уязвимости CVE-2025-55182, использует JDK 17 Использование плагина: По умолчанию сканирование истории / активное сканирование по правому клику. При обнаружении уязвимости автоматически переходит в модуль...

EUVD-2026-66132

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...

CVE-2026-14195

The Brizy WordPress plugin, in versions prior to 2.8.18 , contains an authorization bypass vulnerability. The flaw exists in a request handler that fails to properly verify permissions before returning post content. This allows users with a Contributor role or higher to access and read arbitrary ...

CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

UFONet 2.0

UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...

PT-2026-40896

Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...

CVE-2026-41271 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...

CVE-2026-2654

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-52022: Generation of Error Message Containing Sensitive Information

A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially crafted HTTP GET/POST requests are sent to publ...

CVE-2025-52023: Generation of Error Message Containing Sensitive Information

A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially crafted HTTP GET/POST requests are sent to public A...

CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...

PT-2026-3217

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the api get post summary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-leve...