95851 matches found
corsair_scan
Bienvenido a Corsairscan Corsairscan es una herramienta de seguridad para probar configuraciones incorrectas de Intercambio de Recursos de Origen Cruzado CORS. CORS es un mecanismo que permite que recursos restringidos en una página web sean solicitados desde otro dominio fuera del dominio desde ...
CVE-2022-27434
CVE-2022-27434 UNIT4 TETA Mobile Edition 29HF13 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page. The vulnerability exist in the error page generated by the application in this case: while changing password. Adding quotation mark to...
CVE-2023-3338-DECPwn
DECPwn Practicing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled. Scenarios Everything disabled : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" Code execution is redirected to the output function in userland, which invokes...
CVE-2026-15101 WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...
EUVD-2026-69000
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2026-15101
The WPBakery Page Builder plugin for WordPress (versions up to and including 8.7.4 ) is affected by a Stored Cross-Site Scripting (XSS) vulnerability via the 'data' parameter . The root cause is a sanitization bypass: the wp_kses_post filter applied on save fails to strip the payload because the ...
CVE-2024-34469
CVE-2024-34469 La versión Rukovoditel hasta la 3.5.3 se ve afectada por un ataque de cross-site scripting XSS El payload puede incrustarse en dos lugares: en la página de registro y en la cuenta personal del usuario con cualquier privilegio. La vulnerabilidad está en el parámetro userphoto. 1...
xcrawl3r
xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...
sap_igs_xxe
Ataque XXE SAP IGS CVE-2018-2392 y CVE-2018-2393 Este módulo en Metasploit Framework Documentación Módulo Aplicación vulnerable Este módulo explota CVE-2018-2392 y CVE-2018-2393, dos vulnerabilidades XXE dentro de la página XMLCHART de SAP Internet Graphics Servers IGS que ejecutan versiones 7.20...
CVE-2025-14172-Nuclei-Template
📄 Plantilla de Nuclei para CVE-2025-14172 🚀 Descripción general Este repositorio contiene una plantilla de Nuclei diseñada específicamente para detectar una Vulnerabilidad de Falta de Autorización CVE-2025-14172 en el plugin de WordPress WP Page Permalink Extension. Este problema permite que...
eden
Eden Eden loader es un PoC UDRL para Cobalt Strike construido con Crystal Palace que combina la técnica de page streaming de Raphael Mudge con una puerta de llamada modular actualmente una versión PIC del BOF de llamada Draugr de Sleepmask-VS. El objetivo de Eden loader es: Demostrar el poder de...
CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit
Introducción Este exploit fue desarrollado basado en la descripción técnica de depthsecurity root@kitploit: https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices Descripción La aplicación de gestión web HTTP en los dispositivos Edgewater Networks...
EUVD-2026-68990
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...
CVE-2025-2294
Exploit CVE-2025-4403 Detalles Publicado : 27 de marzo de 2025 Actualizado : 28 de marzo de 2025 Severidad : Crítica Puntuación CVSS: 9.8 CWE : CWE-22: CWE-22 Limitación incorrecta de un nombre de ruta a un directorio restringido 'Path Traversal' Versiones afectadas : Todas las versiones desde n/...
CVE-2022-0847
CVE-2022-0847 Dirty Pipe análisis de escalada de privilegios en Linux toc Este artículo se publicó originalmente en la cuenta pública de seguridad de Huawei, esta es la versión del blog más completa Enlace original: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Resumen de la vulnerabilidad ID...
domdig
DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...
WordPress WPBakery Page Builder plugin <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via 'data' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin WPBakery Page Builder versions = 8.7.4...
EVCer
EVCer | CVE-2023-0159 - Extensive VC Addons para WPBakery page builder Herramienta automática masiva para comprobar vulnerabilidad en CVE-2023-0159 - Extensive VC Addons para WPBakery page builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...
CVE-2022-41445
CVE-2022-41445 Cross Site Scripting in Teacher's Record Management System using CodeIgnitor Suggested description A cross-site scripting XSS vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int...