rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

CVE-2026-5800

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 अंतिम संस्करण - पैच नहीं किया गया Github project : https://github.com/trippo/ResponsiveFilemanager आवश्यकताएँ: कुछ भी आवश्यक नहीं है, यह एक्सप्लॉइट अप्रमाणित है। रिस्पॉन्सिव फ़ाइलमैनेजर एप्लिकेशन एक वेब-आधारित फ़ाइल प्रबंधन उपकरण है जिसका...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerabile a CVE-2022-46604 bypass dell'estensione di creazione file che porta a RCE. L'attuale exploit è scritto in Python 3 e sfrutta la vulnerabilità per caricare una webshell che consente l'esecuzione remota dei comandi...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC per Responsive Filemanager 9.12.0: bypass delle restrizioni di upload che porta a RCE Dov'è la vulnerabilità? Quando si carica un nuovo file si passa attraverso la funzione fixfilename:...

CVE-2022-46604-Responsive-File-Manager

CVE 2022 46604 – Responsive File Manager ⚠️ Disclaimer Questo repository è destinato esclusivamente a scopi didattici e di ricerca. Le informazioni e il codice forniti qui possono essere utilizzati in ambienti controllati come macchine di laboratorio private. L'uso non autorizzato di questo codice...

WP Responsive Images <= 1.0 - Arbitrary File Read

WP Responsive Images plugin for WordPress = 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server. id: CVE-2026-1557 info: name: WP Responsive Images = 1.0 - Arbitrary File Read author: Shivam...

WordPress ARPrice <3.6.1 - SQL Injection

WordPress ARPrice plugin prior to 3.6.1 contains a SQL injection vulnerability. It fails to properly sanitize and escape user supplied POST data before being inserted in an SQL statement and executed via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read

WordPress Responsive Vector Maps 6.4.2 contains an arbitrary file read vulnerability because the plugin does not have proper authorization and validation of the rvmuploadregionsfilepath parameter in the rvmimportregions AJAX action, allowing any authenticated user to read arbitrary files on the w...

Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

rainmap-lite

rainmap-lite Rainmap Lite – Reaktionsfähige Webanwendung, mit der Benutzer Nmap-Scans von ihren Mobiltelefonen/Tablets/Webbrowsern aus starten können! Im Gegensatz zu seinem Vorgänger 1 benötigt Rainmap-lite keine speziellen Dienste RabbitMQ, PostgreSQL, Celery, Supervisor usw., um die Installati...

CVE-2020-10567

POC-CVE-2020-10567 POC RCE - RESPONSIVE filemanager v.9.14.0. non il ramo principale ⚠️ Progetto GitHub : https://github.com/trippo/ResponsiveFilemanager Requisiti: Non è richiesto nulla, questo exploit non è autenticato. L'applicazione Responsive Filemanager è uno strumento di gestione file basat...

Astra Linux – Vulnerability in Firefox and Thunderbird

Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-19382

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19363

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation results in sensitive information in log files. The attack can be executed remotely. src/handler.rs logs raw...

CVE-2026-19037

WonderTrader up to version 0.9.9 contains a vulnerability in the Internal Limit Order Book Cache Handler, specifically in MatchEngine::update_lob (src/WtBtCore/MatchEngine.cpp). The issue enables manipulation that enforces a different behavioral workflow and is remotely exploitable. Public exploi...

CVE-2026-18959

A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopacks/restapi/routes/panel-api.php of the component Files Endpoint. This manipulation causes path traversal. The attack may be initiated remotely. The...

CVE-2026-18897 UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...