professional-services

Professional Services Soluciones y herramientas comunes desarrolladas por el equipo de Professional Services de Google Cloud. Aviso legal Este repositorio y su contenido no son un producto de Google con soporte oficial. Licencia Todas las soluciones de este repositorio se proporcionan bajo la...

CVE-2023-50072

CVE-2023-50072 A stored cross-site scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

Gurp

要求 BurpSuite Professional 版本 v2.0.0beta 或更高版本，来自 PortSwigger 在 用户选项 杂项 REST API 下启用 API。 依赖项 root@kitploit: go get -u -v github.com/joanbono/Gurp 将 rsrc 添加到 $PATH，以便使用图标构建 Windows 二进制文件。 运行 make all 来构建 Windows、Linux 和 Darwin 的二进制文件。 要将二进制文件安装到 $GOPATH 中，请运行 make install。 二进制文件 最新版本可在此处获取。 构建...

BurpSuite_Pro_v1.7.37

Actualización de burpsuiteprov2.0beta.jar root@kitploit: Burp Suite 2.0 beta ya está disponible para los usuarios profesionales. Esta es una actualización importante con muchas funciones nuevas, incluyendo: - Un nuevo rastreador, capaz de manejar sesiones automáticamente, detectar cambios en el...

pockint

POCKINT（即 Pocket Intelligence）是面向 DFIR/OSINT 专业人士的 OSINT 瑞士军刀。这是一款轻量级且便携的 GUI 程序，以紧凑的形式为用户提供基本的 OSINT 能力：POCKINT 的输入框接受典型的指标（URL、IP、MD5），并且允许用户以可迭代的方式执行基本的 OSINT 数据挖掘任务。 安装 你可以从发布页面获取最新版本。POCKINT 以单个可执行文件的形式提供，可以存储在电脑的任何位置并直接运行。POCKINT 仅适用于 Windows。 特性 为什么使用它？POCKINT 被设计为简单、便携且强大 。 ⭐ 简单 ：市面上有大量优秀...

WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional Map In Your Language plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such ...

CVE-2025-39247

CVE-2025-39247 Objetivo: HikCentral Professional HCMP, servidor central VMS CVE: CVE-2025-39247 — Vulnerabilidad de Control de Acceso CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Afectado: V2.3.1 – V2.6.2 y V3.0.0 Corregido: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Divulgado: 2025-08-28 Fec...

CVE-2020-24955

CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Escalation dei privilegi locale Le versioni di SUPERAntiSpyware Professional X Trial precedenti alla 10.0.1206 sono vulnerabili a un'escalation dei privilegi locale perché consentono agli utenti non privilegiati di ripristinare file...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

CVE-2024-27518

CVE-2024-27518 - PoC LPE per SUPERAntiSpyware Professional X Questa vulnerabilità è stata scoperta e divulgata da M. Akil Gündoğan del Secunnix Vulnerability Research Team. Questo repository conterrà la proof-of-concept e gli advisory. Dettagli: Prodotto: SUPERAntiSpyware Professional X e tutte l...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

CVE-2026-15244

CVE-2026-15244 affects the HUSKY WordPress plugin prior to 1.4.1. A stored setting value is not sanitized against directory traversal before being concatenated into a file inclusion path, enabling a user with the shop manager capability to cause inclusion and execution of arbitrary local files. T...

CVE-2026-52854

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:02+00:00| published-proof-of-concept| https://github.com/ProfessionalWiki/Maps/security/advisories/GHSA-4h7g-5542-v3fc 2026-08-18 23:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd56wys52r 2026-08-19...

vulnerability-assessment-metasploitable2

Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...

CVE-2017-20274

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking,...

CVE-2017-20274

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking,...

EUVD-2017-19001

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking,...

CVE-2026-7300

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Web Integration Service allows Filter Failure through Buffer Overflow.This issue affects Connext Professional: from 7.4.0 before 7., from 7.0.0 before 7.3.1.3, from 6.1.2 before 6.1...

CVE-2026-3894

Out-of-bounds Read vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.0.0 before 5.2...