project-black

Project Black Scope control, scope scanner and progress tracker for easier working on a bug bounty or pentest project Anatoly Ivanov of Positive Technologies What is this tool for? The tools encourages more methodical work on pentest/bugbounty, tracking the progress and general scans information...

CVE-2026-92931

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-92931 CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

EUVD-2026-92430

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-92931

The @progress/sitefinity-nextjs-sdk npm package (versions 15.1.8326 through 15.4.8637 ) is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918). This flaw may allow a remote attacker to force the server to make requests to an attacker-controlled host , which could lead to the exposure of ...

CVE-2026-77805 Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

CVE-2026-77803

Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021 , contains a front-end request desynchronization vulnerability in the proxy request forwarding component. The root cause is that the software forwards requests containing both Content-Length and Transfer-Encoding ...

CVE-2026-77802

Progress Telerik Fiddler Classic for Windows versions prior to v6.0.20262.10021 are vulnerable to HTTP request smuggling in the proxy request forwarding component. The issue arises because the software forwards requests with multiple conflicting Content-Length headers verbatim, while only using t...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh...

CVE-2022-32981

CVE-2022-32981 poc for CVE-2022-32981 under work needs testing + adjusting the offset to the correct one for exploit function...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile 인증 우회 Progress ShareFile 인증 우회 탐지 아티팩트 생성 도구 설명 이 탐지 아티팩트 생성기는 Progress ShareFile 인스턴스가 CVE-2026-2699 인증 우회에 취약한지 확인합니다. 탐지 아티팩트 생성기는 /ConfigService/Admin.aspx 엔드포인트에 GET 요청을 전송하고 응답을 확인합니다. 주의 - 이 도구는 전체 악용zone takeover을 수행하지 않으며 이 취약점을 RCECVE-2026-2701와 연쇄적으로...

sshhipot

버전 2가 개발 중입니다. v2 브랜치로 전환하여 빌드하고 -h 옵션과 함께 실행해 주세요. SSHHiPot 고상호작용 SSH 허니팟사실은 로깅 SSH 프록시입니다. 아직은 어느 정도 진행 중인 작업입니다. 시도해 보고 싶다면 자유롭게 이 저장소를 go install하세요. 더 많은 옵션을 보려면 -h 옵션과 함께 실행하세요. 특히 로깅은 좀 거칩니다. 언젠가는 더 나은 문서가 있을 거예요, 정말로. 일반적인 아이디어는 sshlowpot이 공격자와 실제 SSH 서버 사이에 위치하여 공격자가 허니팟에 로그인하고, 허니팟이 서버에...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

progress-burp

진행 추적기 취약점 평가 진행 상황을 추적하는 Burp Suite 확장 프로그램. 기능 Burp Suite 도구Proxy, Repeater, Target에서 항목고유 요청을 캡처합니다. 요청 고유 키는 다음과 같이 정의됩니다: 대상호스트, 포트, 프로토콜, 경로 및 메서드. 항목에는 다음과 같은 편집 가능한 속성이 있습니다: 설명 상태차단됨, 완료됨, 무시됨, 진행 중, 새로움, 연기됨 태그 항목은 다음 기준으로 필터링할 수 있습니다: 상태 태그두 가지 필터링 모드가 있습니다: AND - 항목이 모든 필터링 태그를 가져야 함...

PT-2026-105993

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2019-0709

CVE-2019-0708 Exploit In Progress It hits the Vulnerable Function...

WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Progress Planner versions = 1.10.0...

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...

CVE-2024-5806

CVE-2024-5806 progress moveit cve-2024-5806...

CVE-2025-28009

CVE-2025-28009 - SQL Injection in Dietiqa App v1.0.20 Discovered by: Saharuddin Azman Vendor: Appventure Sdn Bhd Product: Dietiqa App Version Affected: v1.0.20 CVE ID: CVE-2025-28009 Vulnerability Type: SQL Injection 📝 Description A SQL Injection vulnerability exists in the u parameter of the...