osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

DotNetNuke 07.04.00 - Administration Authentication Bypass

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. id: CVE-2015-2794 info: name: DotNetNuke 07.04.00 - Administration Authentication Bypass author: 0xr2r severity...

Kentico - Installer Privilege Escalation

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard. id: CVE-2017-17736 info: name: Kentico - Installer...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

git-secrets

=========== git-secrets Prevents you from committing passwords and other sensitive information to a git repository. .. contents:: :depth: 2 Synopsis :: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets...

pritunl

pritunl: 엔터프라이즈 VPN 서버 Pritunl은 OpenVPN 프로토콜로 구축된 분산형 엔터프라이즈 VPN 서버입니다. 문서 및 추가 정보는 홈페이지 pritunl.com에서 확인할 수 있습니다. 소스에서 설치 Install MongoDB if running single host configuration sudo tee /etc/yum.repos.d/mongodb-org.repo EOF mongodb-org name=MongoDB Repository...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms https://github.com/anouarbensaad/vulnx/archive/master.zip VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

bettercap

Join the project community on our server! bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security res...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

CVE-2024-25092

CVE-2024-25092 익스플로잇 개요 CVE-2024-25092 는 WordPress NextMove Lite 플러그인 버전 = 2.17.0에 영향을 미치는 높은 심각도의 취약점입니다. 이 취약점은 권한 확인 누락으로 인해 subscriber+ 사용자가 WordPress 사이트에서 임의의 플러그인을 설치하고 활성화할 수 있게 합니다. 세부 정보 게시일 : 2024-06-09 업데이트일 : 2024-06-09 심각도 : 높음 CVSS Score: 8.8 CWE : CWE-862 - 승인 누락 영향받는 버전 : n/a부터...

exploit_cve_2025_67303

exploitcve202567303 CVE-2025-67303에 대한 PoC 생성 원본 PoC는 https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

CVE-2018-1335

CVE-2018-1335 apache Tika-server 1.18 미만 버전의 RCE원격 코드 실행 취약점 명령어: sudo bash install.sh python2 exploit.py...

CVE-2025-2807

CVE-2025-2807: Motors 플러그인 익스플로잇 제공: Nxploited | Khaled Alenazi ⚠️ 취약점 요약 플러그인: Motors 📅 간단성과 심각한 영향으로 인해 대규모 익스플로잇이 예상됩니다. 🚫 기술적 세부사항 취약한 엔드포인트: /wp-admin/admin-ajax.php 취약한 액션: mvlsetupwizardinstallplugin 필요한 접근 수준: Subscriber+ 로그인한 사용자 핵심 문제: currentusercan'installplugins' 또는 유사한 권한 확인 누락 🚀...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install Описание проекта Лично собранные файлы для полностью автоматической быстрой одношаговой установки и развертывания master и node узлов для Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 без уязвимости CVE-2018-1002105, подходит для быстрой установки и...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...