SendGrid for WordPress <= 1.4 - SQL Injection

Smackcoders SendGrid for WordPress affected versions 1.4 and below contains a SQL injection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2024-43965 info: name: SendGrid for...

wholeaked

소개 root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked는 파일 공유 도구로, 유출 사고 발생 시 책임자를 찾을 수 있도록 해줍니다. Go로 작성되었습니다. 어떻게? wholeaked는 공유할 파일과 수신자 목록을...

wholeaked

Introduction root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked is a file-sharing tool that allows you to find the responsible person in case...

RedTeamScripts

RedTeamScripts さまざまなレッドチーム用スクリプトをまとめたリポジトリです。 kill.exe レッドチーム活動中にさまざまな作業を行っていて、手動で閉じたくないプロセスが複数実行されている場合、kill.exe が役立ちます。C:\Windows\ にコピーして、終了したいプロセス名を指定して呼び出すだけです。 root@kitploit: kill mspaint killing mspaint 16524 killing mspaint 5284 killing mspaint 8568 killing mspaint 32244 killing mspaint...

CVE-2024-43965

CVE-2024-43965 SendGrid for WordPress = 1.4 - 認証不要のSQLインジェクション 説明 WordPress用SendGrid for WordPressプラグインは、バージョン1.4まで（1.4を含む）において、ユーザー指定パラメータのエスケープ処理が不十分で、既存のSQLクエリの準備処理が不足しているため、SQLインジェクションに対して脆弱です。これにより、認証されていない攻撃者が既存のクエリに追加のSQLクエリを付加し、データベースから機密情報を抽出するために使用できる可能性があります。 root@kitploit: Type: plugi...

GO-2022-1144 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow-fips, terraform-provider-sendgrid-fips, kubeflow-katib, kubeflow...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: hey, terraform-provider-sendgrid, grpcurl, k3d, terraform-provider-sendgrid-fips...

GO-2021-0238 vulnerabilities

Vulnerabilities for packages: hey, terraform-provider-sendgrid, grpcurl, k3d, terraform-provider-sendgrid-fips...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow-fips, wireguard-go, grpcurl, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kube-state-metrics, kubeflow-katib, kubeflow...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, go, gke-gcloud-auth-plugin, terraform-provider-sendgrid, kubeflow-fips, wireguard-go, restic, grpcurl, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kube-state-metrics, kubeflow-katib, kubeflow...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, gitleaks, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, vt-cli...

GO-2021-0356 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow-fips, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kubeflow...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, gitleaks, kubeflow-fips, grpcurl, k3d, dynamic-localpv-provisioner, php-fpmexporter, terraform-provider-sendgrid-fips, vt-cli, kube-state-metrics, kubeflow...

GO-2022-0968 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow-fips, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kubeflow...

GO-2022-0493 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, grpcurl, k3d, dynamic-localpv-provisioner, kind, terraform-provider-sendgrid-fips, kubeflow, ctop...

GO-2022-1144 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, terraform-provider-sendgrid...

GO-2021-0238 vulnerabilities

Vulnerabilities for packages: k3d, hey, grpcurl, terraform-provider-sendgrid...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: k3d, hey, grpcurl, terraform-provider-sendgrid...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, k3d, vt-cli, terraform-provider-sendgrid, gitleaks...

GO-2021-0356 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, k3d, kubeflow, terraform-provider-sendgrid...