Shiva

Shiva 首先，请关注Shiva。我将逐步将其升级为一个完整的压力测试套件。 Shiva旨在通过一次性加载所有jQuery脚本（通过load-scripts.php）对WordPress网站执行拒绝服务（DOS）攻击。因此，它本质上是CVE-2018-6389的利用程序。 亮点 Shiva使用多线程尽可能快地使网站下线， 您无需担心IP暴露，因为Shiva使用Proxify通过随机代理路由所有请求，这些代理会自动轮换。 依赖与兼容性 Shiva兼容python2和python3。 依赖项： requests proxify 使用方法 您可以通过以下方式使用Shiva攻击目标：...

PYSEC-2026-541 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

EUVD-2025-35563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards allows Reflected XSS.This issue affects WSAnalytics: from n/a through = 1.1.2...

CVE-2025-48097

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards allows Reflected XSS.This issue affects WSAnalytics: from n/a through = 1.1.2...

PT-2025-43159

Name of the Vulnerable Software and Affected Versions Shiva WSAnalytics versions through 1.1.2 Description A flaw exists in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards that allows for Reflected Cross-site Scripting XSS. This occurs due to improper neutralization of input during...

EUVD-2000-0513

Malware in sbrugna...

MAL-2024-9258 Malicious code in wassup-shiva (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0899fc457c77b483e51bf66f4a0c586cfa9ad8c89be4ae2541efd3bc435a09d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wassup-shiva (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0899fc457c77b483e51bf66f4a0c586cfa9ad8c89be4ae2541efd3bc435a09d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shiva-rao23 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 547111e4f321ae5a7e00fdb3d22ee785be4cfff6d16243510d4579232351e895 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12344 Malicious code in shiva-rao23 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 547111e4f321ae5a7e00fdb3d22ee785be4cfff6d16243510d4579232351e895 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

shivaonline.co.uk Cross Site Scripting vulnerability OBB-3488778

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shivaonline.co.uk Cross Site Scripting vulnerability OBB-3179000

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

shiva-server 路径遍历漏洞

shiva-server is a repository for Alvaro Personal Developers. A security vulnerability exists in shiva-server version 0.10.0 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Intel Corporation Shiva Access Manager 5.0 Solaris World Readable LDAP Password

No description provided by source. source: http://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a...

Shiva Integrator Default Password (Telnet)

The remote Shiva router uses the default password. This means that anyone who has downloaded a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection. SPDX-FileCopyrightText: 2000 Stefaan Van Dooren Some text descriptions might be...