CVE-2026-48907-Joomla-JCE-detection

Joomla JCE CVE-2026-48907 — PoC-Validierung, Webshell-Artefakte und SOC-Erkennung Defensiver Validierungsbericht und SOC-orientierte Erkennungshinweise für CVE-2026-48907 , das den Joomla Content Editor JCE bis Version 2.9.99.4 betrifft. Zweck des Repositorys Dieses Repository dokumentiert eine...

Ultimate-wp2shell

WP2Shell – Prova di Concetto Prova di Concetto PoC educativa e difensiva per la validazione dell'esposizione alle vulnerabilità del WordPress Core CVE-2026-60137 e CVE-2026-63030 WP2Shell. Panoramica Questo repository fornisce una prova di concetto difensiva per il rilevamento e la validazione...

CVE-2026-20230-Scanner

Scanner CVE-2026-20230 Uno scanner e strumento di validazione basato su Python per identificare distribuzioni Cisco Unified Communications Manager Unified CM potenzialmente vulnerabili affette da CVE-2026-20230. Caratteristiche Rileva istanze Cisco Unified CM Verifica l'esposizione di WebDialer...

litellm-sqli-scanner

Scanner de Injeção SQL do LiteLLM CVE-2026-42208 — injeção de SQL no Proxy LiteLLM Detecta e valida a CVE-2026-42208: vulnerabilidade de injeção de SQL na camada de banco de dados do Proxy LiteLLM. Apenas para testes de segurança autorizados. Recursos Detecção de injeção de SQL CVE-2026-42208...

bug-reaper

BugReaper Strukturierte Web2-Bug-Bounty-KI-Fähigkeit – 18 Schwachstellenklassen, 4 Bug-Bounty-Plattformen, null KI-Schrott. Kompatibel mit OpenClaw, Cursor, Claude Code, Antigravity und Windsurf. BugReaper ist eine Agent Skill, die jeden kompatiblen KI-Agenten in einen disziplinierten...

nuclei_poc

This repository is an offensive tool for Nuclei POCs. It is a Python script that clones GitHub repositories, extracts Nuclei POCs, and organizes them into categorized folders. The script runs automatically every day using GitHub Actions. The primary vulnerability class targeted by this tool is no...

Car Workshop System - SQL Injection

Car Workshop System - SQL Injection Car Workshop System, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: N/A Injection point:...

Joomla! Component Guesser v1.0.4 - SQL Injection

Joomla! Component Guesser v1. 0. 4 - SQL Injection Joomla! Component Guesser v1. 0. 4, There is parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: inurl:index. php? option=comguesser...

Joomla! Component OneVote! v1.0 - SQL Injection

Joomla! Component OneVote! v1. 0 - SQL Injection results. in php electionid parameters into the SQL statement exist GET the type of injection Injection point: http://localhost/PATH/components/comonevote/results. php? electionid=SQL union injected payload: +/! 50000union/+select+@@version-- - Test...

Joomla! Component Abstract v2.1 - SQL Injection

Joomla! Component the Abstract v2. 1 - SQL Injection Joomla! Component the Abstract v2. 1, There is a parameter filter is not strict, leading to a sql injection vulnerability Injection point: http://localhost/PATH/index. php? option=comabstract&view=conferences&layout=detail&pid=SQL...

HackerOne: Subdomain takeover at info.hacker.one

Summary: Hi team,i've been able to takeover subdomain at info.hacker.one, the CNAME entry in the subdomain is pointing to an external page service app.unbounce.com. Actual Dns Entry: F156764 Steps To Reproduce 1 I have claimed the domain and placed a page for PoC validation located under: Go to -...