Login Configurator <=2.1 - Cross-Site Scripting

Login Configurator WordPress plugin = 2.1 contains a reflected cross-site scripting caused by improper escaping of URL parameter before outputting it to the page, letting attackers execute scripts in the context of site administrators, exploit requires victim to visit a malicious URL. id:...

OneDev < 4.0.3 - User Access Token Leak

OneDev before version 4.0.3 contains an insecure endpoint that allows retrieval of arbitrary user details, including access tokens, due to missing security checks on /users/id, letting attackers leak sensitive data and impersonate users, exploit requires no special conditions. id: CVE-2021-21246...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

FortiOS - Insecure LDAP Configuration Detection

The FortiGate LDAP configuration was detected to be insecure due to missing ca-cert, secure LDAPS, or server-identity-check, potentially exposing LDAP communications to credential interception or man-in-the-middle attacks under specific network conditions. id: CVE-2019-5591 info: name: FortiOS -...

Integrate Google Drive <= 1.5.3 - Information Disclosure

File Manager for Google Drive - Integrate Google Drive with WordPress plugin for WordPress = 1.5.3 contains sensitive information exposure caused by improper protection of the getlocalizedata function, letting unauthenticated attackers extract Google OAuth credentials and account email addresses,...

Buffalo WSR-2533DHPL2 - Improper Access Control

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor. id: CVE-2021-20092 info: name: Buffalo WSR-2533DHPL2 - Improper Access Control author: gy741,pdteam,par...

FREEDOM Administration - Default Login

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires ma...

9Router <= 0.4.36 - Unauthenticated RCE

9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...

Frontend File Manager < 21.3 - Unauthenticated File Renaming

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server id:...

Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution

Monsta FTP = 2.11 contains an unrestricted file upload vulnerability caused by lack of authentication on file uploads, letting unauthenticated attackers execute arbitrary code by uploading crafted files. id: CVE-2025-34299 info: name: Monsta FTP = 2.11.2 - Unauthenticated Remote Code Execution...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection

The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

LatePoint <= 5.0.11 - SQL Injection

The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CyberQRM

CyberQRM – 网络量化风险管理 一个本地、开源的平台，用于基于 FAIR v3.1（信息风险因子分析）框架进行量化网络安全风险评估 。从浏览器中建模威胁、运行蒙特卡洛模拟、衡量控制措施有效性并管理风险组合——无需云账户。 功能 基于FAIR的风险建模 — 针对每个场景，使用三角分布、对数正态分布或点分布定义威胁事件频率、脆弱性、资产价值和损失事件影响 多基础资产估值 — 将资产价值建模为多个维度的总和（重置成本、收入影响、监管风险、业务中断、声誉价值），每个维度有自己的分布 初级与次级损失 —...

boa-detector

boa-detector 这个 Zeek 包检测 HTTP 头中的 Boa web server 字符串。所有 Boa 版本均被视为存在漏洞： https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ 当观察到 /^Boa/./ 服务器字符串时，此包会针对连接的 c$id$resph 发出一个通知 BoaDetector::VulnerableBoaWebServer。...

Internet-Scanner

局域网扫描器 一个使用Tkinter的图形界面，用于扫描本地IPv4网络（ARP + nmap探测），显示设备，允许运行全端口扫描和导出结果。 快速概览 ARP扫描发现局域网设备。 改进的nmap探测，获取主机名、厂商、开放端口、操作系统猜测和延迟。 全端口按钮对选定设备运行密集的nmap扫描。 基于检测到的开放端口的智能风险评分（低/中/高/严重）。 实时仪表板统计（总设备数、开放端口主机数、高风险主机数、平均延迟）。 实时筛选/搜索和可排序的表列，以加快分类。 重新扫描选定设备、复制IP和网络洞察（本地/公网IP + 平台详情）。 导出结果为CSV或JSON。 依赖要求 Window...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B 后门利用 关于 在 Auerswald COMpact 5500R 7.8A 和 8.0B 设备中发现了后门，允许能访问基于 Web 的管理应用程序的攻击者获得设备的完全管理权限。 产品详情 产品：COMpact 3000 ISDN、COMpact 3000 analog、COMpact 3000 VoIP、COMpact 4000、COMpact 5000R、COMpact 5200R、COMpact 5500R、COMmander 6000RRX、COMpact 5010 VoIP、COMpact 5020...

webshell

webshell | English | Türkiye 这是一个webshell收集项目 送人玫瑰，手有余香，如果各位下载了本项目，也请您能提交shell 本项目涵盖各种常用脚本 如：asp,aspx,php,jsp,pl,py 如提交各种webshell，请勿更改名称和密码 注意：所有shell 本人不保证是否有后门，但是自己上传的绝不会故意加后门 各位提交的，也请勿加后门 如发现存在后门代码，请issues 。 本项目提供的工具，禁止从事非法活动，此项目，仅供测试，所造成的一切后果，与本人无关。 在扩展一个项目 1. webshell-venom 2. 免杀webshell无限生成...