OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation

The Read More & Accordion expand-maker plugin for WordPress through 3.5.7 allows privilege escalation due to improper validation in the importData AJAX handler yrmimportdata action. An authenticated user with plugin access can upload a crafted JSON attachment to insert arbitrary rows into WordPre...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

Essential Blocks < 6.4.0 - Information Disclosure

Gutenberg Essential Blocks WordPress plugin 6.4.0 contains an information disclosure caused by unrestricted access to a public REST route exposing non-public WooCommerce sales metrics, letting unauthenticated users read product sales data. id: CVE-2026-13153 info: name: Essential Blocks 6.4.0 -...

SiYuan <= 3.6.5 - Unauthenticated Path Traversal

SiYuan = 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route publish mode port 6808, allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code. id: CVE-2026-54066 info: name:...

golddigger

Gold Digger Rechercher des fichiers pour trouver de l'or Gold Digger est un outil simple conçu pour aider à découvrir rapidement des informations sensibles dans les fichiers de manière récursive. Il a été initialement écrit pour faciliter la recherche rapide dans les fichiers obtenus lors d'un te...

FileWatchTower

FileWatchTower - FWT Примечание: этот проект больше не поддерживается и размещён здесь из архива проектов в справочных целях. Он доступен всем, кто заинтересован в разработке программного обеспечения для анализа файлов. FWT — это инструмент анализа безопасности и мониторинга файлов, использующий...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...

domainim

DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...

shed

Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...

sqlmap-tamper-api

SQLmap Tamper-API C'est une API pour les scripts tamper de SQLmap qui vous permet d'utiliser votre langage de programmation préféré pour écrire vos scripts tamper. Cette API résout la limitation de SQLmap qui n'accepte que Python pour écrire des scripts tamper. Comment ça fonctionne Le script...

CVE-2019-6340

CVE-2019-6340 À des fins éducatives uniquement Exécution $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 Exploitation GET $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...

CVE-2022-21306

CVE-2022-21306 POC, EXP, chatGPT pour moi, ne donne que quelques pistes, tout est inutilisable. code import json import requests targeturl = "http://127.0.0.1:7001" headers = 'User-Agent': 'Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/58.0.3029.110...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage usage: java -jar cba-cli.jar OPTIONS -a...

custom-bytecode-analyzer

custom-bytecode-analyzer Analyseur de bytecode Java personnalisable via des règles JSON. C'est un outil en ligne de commande qui reçoit un chemin contenant un ou plusieurs fichiers Jar ou War, les analyse en utilisant les règles fournies et génère des rapports HTML avec les résultats. Utilisation...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

CFB

Qu'est-ce que c'est ? !CAUTION CFB est conçu pour la recherche et le débogage, il ne doit jamais être utilisé sur des systèmes de production. Des BSoD peuvent survenir. Vous êtes prévenus. Canadian Furious Beaver est un outil de type ProcMon conçu uniquement pour capturer les IRP envoyés à tout...

Detection-and-Mitigation-script-for-CVE-2021-42717

Скрипт обнаружения и смягчения для CVE-2021-42717 Скрипт обнаружения и смягчения для CVE-2021-42717 - Уязвимость DoS в ModSecurity при парсинге JSON ModSecurity 3.x до 3.0.5 некорректно обрабатывает чрезмерно вложенные JSON-объекты. Специально созданные JSON-объекты с вложенностью в десятки тысяч...