User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

User Profile Builder < 3.11.8 - File Upload

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. id: CVE-2024-6366 info: name: User Profile Builder 3.11.8 - File Upload author: s4e-io severity: high...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

Profile Builder < 3.4.9 - Improper Authentication

The Profile Builder plugin before 3.4.9 for WordPress allows unauthenticated attackers to gain administrative access by exploiting an improper authentication vulnerability in the password reset functionality. An attacker can reset the password of any user, including administrators, without proper...

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/dns.php Profile Name or notes field. id: CVE-2018-19914 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...

WordPress Ultimate Member 2.1.3 - 2.8.2 – SQL Injection

The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘sorting’ parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127

watchTowr-vs-f5-bigip-PreAuth-RCE Generador de artefactos de detección para F5 BIG-IP Consulta nuestra publicación en el blog para obtener detalles técnicos. Detección en acción root@kitploit: ./watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127.py --host 192.168.5.36 --port 80 --command 'touch...

tweets_analyzer

简易 Twitter 个人资料分析器 这个简单的 Python 脚本旨在通过推文分析 Twitter 个人资料，具体检测内容包括： 按小时和星期几的平均推文活动 Twitter 界面设置的时区和语言 使用的来源（移动应用、网页浏览器等） 地理位置 最常用的标签、最常转发的用户和最常提及的用户 基于最频繁时区/语言的好友分析 脚本还有很多功能可以添加，欢迎贡献！👍 安装 ⚠ 首先，在 secrets.py 文件中更新你的 API 密钥。要获取 API 密钥，请访问 https://apps.twitter.com/ 需要 Python v2.7 或更新版本 你需要安装以下 Python...

linkedin-profile-scraper

由于端点问题，LinkedIn个人资料爬虫工具目前不可用。 请查看下方链接以获取替代方法。特别感谢 gosecure 团队。 https://www.gosecure.net/blog/2021/05/27/step-by-step-how-to-deanonymize-emails-on-linkedin/ LinkedIn个人资料爬虫工具 LinkedIn个人资料查找器 Python 脚本已添加到 i-will-tell-you osint 框架中。 执行命令： 1 = email,password="Yourmailid","yourlinkedinpassword"...

CVE-2022-44268

CVE-2022-44268 Este repositorio contiene una Prueba de Concepto POC para una vulnerabilidad en ImageMagick v. 7.1.0-49, una biblioteca de manipulación de imágenes de código abierto ampliamente utilizada. La vulnerabilidad permite a un atacante incrustar el contenido de un archivo arbitrario en un...

mysql-baseline

Línea Base MySQL de DevSec Este Perfil de Cumplimiento asegura que todos los proyectos de hardening mantengan la misma calidad. https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

Moodle-CVE-2019-3810

Moodle CVE-2019-3810 Moodle 3.6.2, 3.5.4, 3.4.7, 3.1.16 XSS PoC para escalada de privilegios Estudiante a Admin. Este es uno de los errores pasados que descubrí durante un pentest anterior en una institución académica. Fue lo suficientemente exitoso en ese momento para prácticamente robar el acce...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

CVE-2022-38577-Processmaker

Este repositorio ha sido archivado y movido a: https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - Escalada de Privilegios en el Perfil de Usuario CVE-2022-38577 Se descubrió que ProcessMaker anterior a v3.5.4 contiene permisos inseguros en la página de perfil de usuario. Esta vulnerabilida...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

unve1ler

揭示互联网上的数字足迹与视觉线索。 一款社交工程工具，旨在无缝定位用户名对应的个人资料，并提供便捷的逆向图像搜索功能。 本工具为概念验证，仅用于教育目的。 unve1ler 是一款强大的社交工程工具，专门用于揭示遍布互联网的数字足迹和视觉线索。该工具允许用户通过输入用户名来无缝定位在线个人资料，同时集成了创新的逆向图像搜索功能，为调查过程增加了便利性。 unve1ler 首先在多个流行平台上进行深入的个人资料搜索。这些平台包括主流社交媒体网络、专业平台、创意空间等。该工具遍历一系列...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - Restablecimiento de contraseña arbitrario sin autenticación CVE-2025-15030 User Profile Builder — Restablecimiento de contraseña sin autenticación → Toma de control de administrador + Subida de shell root@kitploit: / / \ |/ / / / / / \ / / / \ /...