24088 matches found
instaloader
.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...
CVE-2022-44268-MagiLeak
ImageMagick Lectura Arbitraria de Archivos - CVE-2022-44268 Este repositorio contiene un código de prueba de concepto PoC para explotar la vulnerabilidad de lectura arbitraria de archivos CVE-2022-44268 en ImageMagick. El PoC demuestra cómo un atacante puede aprovechar la vulnerabilidad para leer...
CVE-2020-25627
CVE-2020-25627 XSS almacenado a través del parámetro moodlenetprofile en el perfil de usuario Mi PoC sobre este CVE Requisito de usuario: Estudiante o el sitio para registro XSS en moodlenetprofile root@kitploit: Step 1: Log in with an authenticated user Can register or through creating a new use...
container-cve-2021-22555
Reproducción de CVE-2021-22555 como contenedor Primero, esto incluye el código del exploit desde aquí como un contenedor preconstruido práctico: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Contenedor preconstruido: quay.io/cgwalters/cve-2021-22555 Mitigación:...
social-analyzer
Social Analyzer - API, CLI y aplicación web para analizar y encontrar el perfil de una persona en más de 1000 redes sociales/sitios web. Incluye diferentes módulos de análisis y detección, y puedes elegir qué módulos usar durante el proceso de investigación. Los módulos de detección utilizan un...
DirtyTooth-RaspberryPi
DirtyTooth for Raspberry Pi Raspbian Stretch Bluetooth communications are on the increase. Millions of users use the technology to connect to peripherals that simplify and provide greater comfort and experience. There is a trick or hack for iOS 11.1.2 and earlier that takes advantage of the...
Malleable-C2-Profiles
Cobalt Strike - Perfiles C2 Maleables Una colección de perfiles utilizados en diferentes proyectos con Cobalt Strike https://www.cobaltstrike.com/...
CVE-2026-95866
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-93656
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...
ssh-baseline
DevSec SSH Baseline This Compliance Profile ensures, that all hardening projects keep the same quality. https://github.com/dev-sec/puppet-ssh-hardening https://github.com/dev-sec/chef-ssh-hardening https://github.com/dev-sec/ansible-ssh-hardening Standalone Usage This Compliance Profile requires...
awsEnum
awsEnum Enumrate AWS services! with no nosies awsEnum is a python script enumrate AWS services through the provided credential. :book: Table of Contents Table of Contents 1. Screenshot 2. Disclaimer 3. Features 4. Prerequisites 5. How to Install 6. Results and FQAs 7. To-Do :clapper: Screenshot...
CVE-2026-95866 User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...
EUVD-2026-86598
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-95866
The User Profile Builder plugin for WordPress (versions up to and including 4.0.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the Avatar Field . The root cause is insufficient input sanitization and output escaping in the wppb_save_avatar_value() function, where a zero-length multipa...
CVE-2026-93656
The User Profile Builder plugin for WordPress (versions up to and including 4.0.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the Avatar Field . The root cause is insufficient input sanitization and output escaping. Authenticated attackers with Subscriber-level access and above can i...
EUVD-2026-86596
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-93656 User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2022-40471
CVE-2022-40471 Ejecución remota de código mediante una vulnerabilidad de carga de archivos sin restricciones en el Sistema de Gestión de Pacientes de la Clínica v 1.0 Descripción técnica: La ejecución remota de código en el Sistema de Gestión de Pacientes de la Clínica v 1.0 permite al atacante...