33 matches found
steamer
Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...
domainim
DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...
Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...
cfgrip
cfgrip PE/ELF x86/x64 CFG 提取器。输入一个二进制文件，反汇编它，解析每个跳转和调用（GOT、跳转表、寄存器追踪），并将完整的控制流图导出为结构化 JSON。 为什么 你需要确切知道每个分支的去向——不是为了阅读，而是为了打补丁。将 JSON 输入 Zydis 或 AsmJit，定位你需要挂钩或修改的确切指令，然后写回。反作弊团队用它来映射游戏二进制文件；逆向人员用它来将代码提取到自己的分析管线中；软件分析师在不运行二进制文件的情况下追踪执行路径。 cfgrip 提供地图。怎么用取决于你。 它提取什么 对于每个 cfgrip 处理的二进制文件，它会生成： 函数列表...
usbrip
usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...
Nessus_Map
Nessus Map Parser XML di Nessus Requisiti Python3 Django Testato su Ubuntu 18.04 Windows 11 Pro PowerShell Cosa fa Parsing basato sulle vulnerabilità Parsing basato sui servizi Parsing basato sugli host Parsing di sistemi operativi non supportati Genera un riepilogo esecutivo della scansione...
ipsourcebypass
This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses...
PT-2026-32538
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A crafted image could result in an out of bounds heap write a memory corruption error where data is written outside the boundaries of an allocated heap memory block when writing a yaml or json...
CVE-2026-22203
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
EUVD-2026-11748
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
CVE-2026-22203
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
CVE-2026-22203
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
PT-2026-25143
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
Exploit for Improper Verification of Cryptographic Signature in Fortinet Fortiproxy
CVEs: CVE-2025-59718 / CVE-2025-59719 Fortinet Poc Herramient...
BehaviorTree.CPP 代码问题漏洞
BehaviorTree.CPP is a library for behavior trees in C++ open-sourced by BehaviorTree. A code issue vulnerability exists in BehaviorTree.CPP version 4.7.0 and earlier, which stems from incorrect manipulation of the parameter Source of the function JsonExporter::fromJson in the file...
Formie has XSS vulnerability for importing forms
Impact When importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to...
GHSA-P9HH-MH5X-WVX3 Formie has XSS vulnerability for importing forms
Impact When importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to...
Exploit for CVE-2024-4956
CVE-2024-4956 All information is provided for informational...
MemTracer - Memory Scaner
MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework Dynamic-Link...