Lucene search
+L

46 matches found

Kitploit
Kitploit
•added 2026/10/25 12:47 p.m.•209 views

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

8.5AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/25 8:59 a.m.•30 views

c-sentinel

C-Sentinel Semantic Observability for UNIX Systems A lightweight, portable system prober written in C that captures "system fingerprints" for AI-assisted analysis of non-obvious risks. Features auditd integration, explainable risk scoring, and a live web dashboard with enterprise-grade multi-user...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/25 5:43 a.m.•30 views

Prober

Check network assumptions reproducibly This project uses Ansible to generate BATS test files verifying security assuptions about network infrastructure. Tests are run from probe machines "prober nodes " to which Prober is deployed. This tool is meant for reproducible, automated testing of own...

6.2AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 9:16 a.m.•56 views

Malicious code in arbocrate-sla-prober-arbocrate-sla-prober-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a4b9e0346198bed7019ba0bba4e32036dad95c22d83159b22ab5e9920bd8f0 On require of the package, index.js loads setup.js, which resolves the running platform and architecture, downloads a platform-specific binary from...

5.5AI score
SaveExploits0References5
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•1 views

X Prober Server - Information Disclosure Detection

X Prober Server information disclosure was detected. !/usr/bin/env python3 -- coding: utf-8 -- """X Prober Server information disclosure was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'X Prober Server -...

5.7AI score
SaveExploits0References3
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

PHP Prober - Exposure Detection

PHP Prober Server exposure was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Prober Server exposure was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Prober - Exposure Detection',...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:37 p.m.•23 views

CVE-2026-3569

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS5.5AI score0.00372EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/24 8:16 a.m.•23 views

CVE-2026-3569

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS0.00372EPSS
SaveExploits0References8
CVE
CVE
•added 2026/04/24 7:45 a.m.•40 views

CVE-2026-3569

The CVE-2026-3569 entry concerns the WordPress plugin Liaison Site Prober (affected versions

5.3CVSS5.6AI score0.00372EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/04/24 7:45 a.m.•45 views

CVE-2026-3569 Liaison Site Prober <= 1.2.1 - Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS0.00372EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/04/24 7:45 a.m.•82 views

EUVD-2026-25406

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS5.2AI score0.00372EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/04/24 7:45 a.m.•12 views

CVE-2026-3569

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS5.2AI score0.00372EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/04/24 7:45 a.m.•14 views

CVE-2026-3569 Liaison Site Prober <= 1.2.1 - Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS5.6AI score0.00372EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/04/24 12:00 a.m.•52 views

PT-2026-34864

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissions read permission callback unconditionally returns true via return true instead of checking for...

5.3CVSS5.2AI score0.00372EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•26 views

WordPress plugin Liaison Site Prober has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00372EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/24 12:00 a.m.•6 views

CVE-2026-3569: Missing Authorization

The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. The permissionsread permission callback unconditionally returns true via returntrue instead of checking for...

5.3CVSS5.6AI score0.00372EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/04/23 7:17 p.m.•20 views

WordPress Liaison Site Prober plugin <= 1.2.1 - Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint vulnerability

Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin Liaison Site Prober versions = 1.2.1...

5.3CVSS5.8AI score0.00372EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/01/08 12:15 a.m.•21 views

CVE-2019-25280

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions...

6.1CVSS0.00284EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•20 views

Yahei-PHP Prober Cross-Site Scripting Vulnerability

Yahei-PHP Prober is a PHP environment checking script by an individual developer in Zhou, China. A cross-site scripting vulnerability exists in Yahei-PHP Prober version 0.4.7, which stems from unvalidated input of the speed parameter in the prober.php file, which could lead to an HTML injection...

6.1CVSS5.5AI score0.00284EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/01/07 11:11 p.m.•9 views

CVE-2019-25280 Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions...

6.1CVSS6.2AI score0.00284EPSS
SaveExploits1References5
Rows per page
Query Builder