Iran-War-Media

Iran War Media Monitor Read the Full Deep Dive Introduction This project monitors news coverage of the war between Iran, Israel, and the United States. You can use this repository to: 1. Create a corpus of media articles in English 2. Identify authors and news media outlets to keep track of who...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

The Import XML and RSS Feeds WordPress plugin before 2.1.5 allows unauthenticated attackers to execute arbitrary commands via a web shell. id: CVE-2023-4521 info: name: Import XML and RSS Feeds 2.1.5 - Unauthenticated RCE author: princechaddha severity: critical description: The Import XML and RS...

Changedetection.io RSS Single Watch - Cross-Site Scripting

changedetection.io 0.54.1 contains a stored XSS caused by unescaped reflection of UUID path parameter in RSS single-watch endpoint, letting remote attackers execute JavaScript in victim's browser, exploit requires victim to visit crafted URL. id: CVE-2026-27645 info: name: Changedetection.io RSS...

Cross RSS 1.7 - Local File Inclusion

Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php. id: CVE-2014-4941 info: name: Cross RSS 1.7 - Local File Inclusion author: DhiyaneshDK severity: medium...

ShunyaNet-Sentinel

ShunyaNet Sentinel UPDATED: 03/02/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds e.g., breaking news, social media, sends them to an LLM for analysis, and delivers alerts and summary reports directly to the GUI and Slack at regular intervals. The project...

cyber_rss

cyberrss cert 11 Alertas ASD ACSC Australia CERT-FR ANSSI Avisos de ciberseguridad de CISA Avisos ICS de CISA Avisos médicos de ICS de CISA JPCERT/CC Blog de JPCERT/CC Fuente RSS general del NCSC del Reino Unido Guía del NCSC del Reino Unido Noticias del NCSC del Reino Unido Informes del NCSC del...

CVE-2025-24893

Exploit for CVE-2025-24893 CVE-2025-24893 is a critical unauthenticated remote code execution RCE vulnerability affecting the XWiki Platform. This flaw lets any guest user inject and execute arbitrary Groovy code —without authentication—via a specially crafted RSS request to the SolrSearch...

peer-tweet

PeerTweet 使用 BitTorrent DHT 的去中心化信息流。灵感来自 Arvid 和 The8472 的“DHT RSS feeds” http://libtorrent.org/dhtrss.html 截图 快速链接 从发布页面下载最新二进制文件。 从地址问题页面查找和分享 PeerTweet 地址。 什么是 PeerTweet？ BitTorrent 的 DHT 可能是互联网上最具弹性和抗审查能力的网络之一。PeerTweet 利用这个网络允许用户向所有监听者广播 推文 。当你启动 PeerTweet 时，它会生成一个哈希...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2025-24893

Exploit SSTI de XWiki Un exploit en Python para la vulnerabilidad de Inyección de Plantillas del Lado del Servidor SSTI en XWiki a través de la inyección de plantillas Groovy en el endpoint SolrSearch. Vulnerabilidad Tipo : Inyección de Plantillas del Lado del Servidor SSTI Componente : feed RSS ...

CVE-2024-33775

CVE Discovered by: K. Wahab NeoX Vulnerability Details: Product: Nagios XI Version 2024R1.01 Vulnerability: Privilege Escalation from Users "NAGIOS" or "APACHE" Result: Full root access on the target system CVE: https://vulners.com/cve/CVE-2024-33775 Exploit: RSS Dashlet is used in this example...

exploit-CVE-2023-38490

Kirby XML External Entity XXE - CVE-2023-38490 exploit Kirby 3.9.6 XML External Entity Exploit for CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Exploitation demonstration Build and run the vulnerable demo app: root@kitploit: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker run -d --rm -p...

CVE-2026-54339

Glean , a self-hosted RSS reader and personal knowledge management tool, is affected by a non-blind SSRF with full response disclosure in versions prior to 0.2.6 . An attacker who can POST a malicious feed URL to /api/feeds/discover causes the background worker to fetch each item link without net...

CVE-2026-54339 Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discover

Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feedurl to discoverfeedfeedurl, creates a subscription through FeedService.createsubscription, and enqueues fetchfeedtask. The background path calls...

CVE-2026-54339 Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discover

Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feedurl to discoverfeedfeedurl, creates a subscription through FeedService.createsubscription, and enqueues fetchfeedtask. The background path calls...

CVE-2023-5612

Disclosure of the public email in Tags RSS Feed https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possibl...

xwiki-cve-2025-24893-exploit

XWiki CVE-2025-24893 Exploit Unauthenticated Remote Code Execution exploit for XWiki versions vulnerable to CVE-2025-24893. Vulnerability Overview XWiki versions prior to 15.10.9 are vulnerable to unauthenticated RCE through Groovy script injection in the SolrSearch RSS feed handler. The...

ThreatIntel-Aggregator

Agregador de Threat Intel Una plataforma de threat intelligence autoalojada que agrega feeds RSS de más de 60 proveedores de seguridad, ejecuta triaje con IA, correlaciona los hallazgos con tu inventario de activos de RunZero y expone alertas accionables a través de un panel web en modo oscuro...

CVE-2025-24893_Analysis

CVE-2025-24893 - SSTI en SolrSearch de XWiki que permite ejecución remota de código sin autenticación Un laboratorio Docker autónomo que reproduce CVE-2025-24893, una inyección de plantillas del lado del servidor en el feed RSS de SolrSearch de XWiki que conduce a la ejecución remota de código no...