100705 matches found
WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection
The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection id: CVE-2023-0037 info: name: WordPress 10Web Map...
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
The Integrate Google Drive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 1.1.99. This makes it possible for unauthenticated attackers to perform a wide variety of operations, such as movi...
WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting
WordPress AB Google Map Travel plugin through 3.4 contains multiple stored cross-site scripting vulnerabilities. The plugin allows an attacker to hijack the administrator authentication for requests via the 1 lat Latitude, 2 long Longitude, 3 mapwidth, 4 mapheight, or 5 zoom Map Zoom parameters i...
Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...
WP Google Maps < 7.10.43 - Cross-Site Scripting
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO. id: CVE-2019-9912 info: name: WP Google Maps 7.10.43 - Cross-Site Scripting author: ritikchaddha severity: medium description: | The wp-google-maps plugin before 7.10.43 for WordPress has XSS via t...
Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. id: CVE-2017-18556 info: name: Google Analytics by BestWebSoft 1.7.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-google-analytics plugin before 1.7.1 for WordPress has...
kubestriker
A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...
CVE-2026-106414
A flaw was found in Google Chrome on iOS. Improper input validation allows a remote attacker to achieve arbitrary code execution outside the application sandbox. By using social engineering to convince a user to visit a specially crafted HTML page, an attacker can exploit this vulnerability to...
CVE-2026-106242
A flaw was found in the Omnibox address bar component of Google Chrome. A remote attacker leveraging social engineering techniques could exploit this flaw by transmitting crafted network traffic. Successful exploitation results in information disclosure, potentially exposing sensitive user data...
GDir-Thief
GDir-Thief Herramienta de Red Team para exfiltrar el directorio de personas de Google de la organización objetivo al que tengas acceso, a través de la API de People de Google. CÓMO HACERLO Crear un nuevo proyecto de Google Cloud Platform GCP Pasos para obtener el Token de Acceso a la API de Googl...
posta
Posta Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. Prerequisites Google Chrome / Chromium Node.js...
HackerInfo
HackerInfo instalación : sudo apt install python3 python3-pip pip3 install termcolor pip3 install google pip3 install optioncomplete pip3 install bs4 pip3 install prettytable git clone https://github.com/Matrix07ksa/HackerInfo/ cd HackerInfo chmod +x HackerInfo ./HackerInfo -h python3 HackerInfo....
thedorkbox
thedorkbox TheDorkbox Colección completa de Google Dorks y técnicas OSINT para encontrar datos confidenciales Bienvenido a thedorkbox 👋 Esta es una herramienta OSINT que consiste en varios Google dorks incrustados en una plantilla HTML para que usuarios no técnicos comprendan la importancia de la...
SCANNER-INURLBR
Descripción Búsqueda avanzada en motores de búsqueda, permite el análisis proporcionado para explotar GET / POST capturando correos electrónicos y urls, con una unión de validación personalizada interna para cada objetivo / url encontrada. Una herramienta PHP que puede ejecutarse en diferentes...
Google-Dorker
nDorker Automatiza el Dorking más rápido y mejor que nunca. ¿Qué puede hacer? 1. Google Dorking 2. Vendor Dorking 3. Github Dorking 4. Shodan Dorking Obtener nDorker git clone https://github.com/nerrorsec/nDorker cd nDorker Uso python3 nDorker.py -d example.com ¿Encontraste un error? Siéntete lib...
GTRS
GTRS - Shell Inversa de Google Translator Esta herramienta utiliza Google Translator como proxy para enviar comandos arbitrarios a una máquina infectada. INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Configuración del Entorno Primero necesitas un VPS y un dominio; para el dominio puedes...
GATOR
GCP ATTACK TOOLKIT FOR OFFENSIVE RESEARCH GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to...
CVE-2026-106339
Use of released resource in Core in Google Chrome prior to 155.0.8059...