5275 matches found
CANToolz
H1 PROJECT IS MOVED HERE: https://github.com/CANToolz/CANToolz More details: https://asintsov.blogspot.de/2017/08/next-page-in-cantoolz-life.html...
IMDShift
IMDShift AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks...
coreruleset
Branch| Status ---|--- main| 🛡️ OWASP CRS...
CVE-2024-9162
CVE-2024-9162 All-in-One WP Migration and Backup = 7.86 - Authenticated Administrator+ Arbitrary PHP Code Injection The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and...
CVE-2023-6972-Exploit-Arbitrary-File-Deletion
CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...
CVE-2023-6553-RCE-Exploit
🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview...
CVE-2025-5961
CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...
staekka
Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...
pqaudit
pqaudit Scan codebases for quantum-vulnerable cryptography. Get a clear picture of what needs to migrate before Q-Day. pqaudit detects usage of RSA, ECDSA, Ed25519, ECDH, DH, and other algorithms broken by Shor's algorithm. It also identifies already-migrated PQC usage ML-KEM, ML-DSA, SLH-DSA so...
vimana-framework
This project is now hosted here: https://github.com/s4dhulabs/vimana-framework...
CVE-2023-6553
CVE-2023-6553 Due to a incorrect include statement in the "Backup Migration" plugin, a attacker can achieve RCE Summary of the CVE The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file...
All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to unauthenticated information disclosure due to its error.log file being publicly accessible in versions before 7.87. id: CVE-2024-8852 info: name: All-in-One WP Migration 7.87 - Unauthenticated Information Disclosure...
All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write
The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...
WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting
WordPress All-in-One WP Migration plugin 7.62 and prior contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials a...
WordPress 1 Click Migration Plugin < 2.3 - Information Exposure
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data includi...
zend-crypt
zend-crypt Repository abandoned 2019-12-31 This repository has moved to laminas/laminas-crypt. Zend\Crypt provides support of some cryptographic tools. Some of the available features are: encrypt-then-authenticate using symmetric ciphers the authentication step is provided using HMAC;...
CVE-2021-45232
Apache APISIX Dashboard Unauthorized Access Vulnerability CVE-2021-45232 FOFA Query title="Apache APISIX Dashboard" Affected Scope Apache APISIX Dashboard 2.10.1 POC: root@kitploit: IP:PORT/apisix/admin/migrate/export Remediation Suggestions Upgrade to the latest security version Apache APISIX...
skiptracer
アカウントはこちらに移行しました: https://gitlab.com/illwill 現時点ではサポートされていません。 Python 3 移行中です。コードとソースの大幅なアップグレードが必要なため、まだ issue を報告しないでください。 プロジェクトは https://gitlab.com/illwill/skiptracer に移行しました。...
attackintel
アップデート 2018年11月26日 MITREはATT&CK APIの機能を非推奨とし、間もなく廃止する予定です。彼らはSTIXの利用に移行しました。私のコードは参考用として利用可能ですが、開発初期段階にあるATT&CK Intel Webアプリで同じ情報を提供しています。リンクは以下です。常に改善を目指しています。Webアプリへの提案があれば、gr4ym4ntxatgmaildotcomまでお送りください。お楽しみに。 ATT&CK INTEL Webapp ATT&CK Intel 特定の脅威グループに対する戦術、技術、緩和策、検出方法をMITRE ATT&CK...