GitMiner

⚠️ Repository Deprecated — Project Replaced This repository is no longer maintained and has been officially deprecated. The project continues under active development at: https://github.com/unkl4b/Gitminer3 Please migrate to GitMiner3 to access the latest updates, improvements, and active support...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

JSshell

JSshell - 버전 3.1 JSshell - JavaScript 리버스 셸입니다. 원격으로 JS 코드 실행, 블라인드 XSS 악용 등에 사용됩니다. 요구 사항: 모든 OS + Python 2 또는 Python 3 JSshell 버전 3.1의 새로운 기능 JSshell 3.1 새 버전에서 업데이트된 내용: 새로운 JSshell 명령어: snippet - 자바스크립트 코드 조각을 작성할 수 있게 해줍니다. root@kitploit: snippet Use CTRL+D to finish the snippet function new...

WordPress_CVE-2020-8417

WordPressCVE-2020-8417 CSRFコードスニペットの脆弱性 CVE-2020-8417 https://www.youtube.com/watch?v=47OBH4N70f0 フォローする Vulnmachines YouTube Twitter Facebook...

sklad

Sklad 📦 Sklad 는 시스템 트레이에서 동작하는 크로스 플랫폼 스니펫 관리자입니다. 비밀번호, API 키, 코드 스니펫, 자주 복사하는 모든 텍스트를 암호화하여 저장하고 한 번의 클릭으로 사용할 수 있습니다. Sklad Demo ✨ 기능 🔒 마스터 비밀번호 보호 — AES-256 암호화 및 Argon2 키 유도 사용 📋 원클릭 복사 — 트레이 클릭 → 스니펫 선택 → 완료 🔍 전역 검색 — 사용자 단축키로 어디서나 즉시 검색 ⚡ 즉시 생성 — 어떤 앱에서든 사용자 단축키로 스니펫 생성 창 열기 📁 폴더 정리 — 중첩된...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values JWT 페이로드를 보호하기 위한 몇 가지 조정 및 아이디어로, 값을 지속적으로 변경하여 디코딩을 무의미하게 만들고, 디코딩된 출력이 이해 불가능하도록 보장하면서 성능 오버헤드를 최소화합니다. JWT 토큰이란? JSON 웹 토큰 JWT, "jot"으로 발음은 두 당사자 간에 JSON 메시지를 전달하는 간결하고 URL-안전한 방법입니다. RFC 7519에 정의된 표준입니다. 토큰은 점으로 구분된 여러 부분으로 나뉜 긴 문자열입니다. 각 부분은 base64 URL로...

CVE-2023-5043

CVE-2023-5043 Ingress nginx アノテーションインジェクションにより任意のコマンド実行が発生 1. Ingress を作成します（Service と Pod なしでも作成可能） root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-exploit annotations: kubernetes.io/ingress.class: "nginx" nginx.ingress.kubernetes.io/configuration-snippet: |...

CVE-2024-7646

CVE-2024-7646 CVE-2024-7646 の PoC root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200...

cve-2024-7646

CVE-2024-7646 説明 デフォルトでは nginx.ingress.kubernetes.io/server-snippet は無効ですが、本CVEにより nginx.ingress.kubernetes.io/auth-tls-verify-client を使用してカスタムスニペットを挿入したり、Luaコードを含めることが可能です。 修正バージョン ingress-nginx controller v1.11.2 - kubernetes/ingress-nginx11719 および kubernetes/ingress-nginx11721 によって修正されました...

Zimbra-CVE-2017-8802-Hotifx

CVE-2017-8802 このZimletは、「フラグメントを表示」Show Fragment / スニペット機能を無効化することで、CVE-2017-8802を修正します。 詳細については、https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories を参照してください。 Zimletのデプロイ方法 https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...

Astra Linux – Vulnerability in SQLite3

The ext/fts3/fts3.c file in SQLite before version 3.32.0 contains a use-after-free in the fts3EvalNextRow function, which is related to the snippet feature...

CVE-2026-58474 whichllm < 0.5.16 Code Injection via run and snippet commands

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...

CVE-2026-58474

whichllm before version 0.5.16 contains a code injection vulnerability in the run and snippet commands. The script generation function in cli.py interpolates HuggingFace-derived values—including GGUF variant filenames from the Hub API siblings rfilename field—directly into Python source code with...

JLSEC-2026-1387 A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

CVE-2026-77643

A flaw was found in Xapian xapian-core. This cross-site scripting XSS vulnerability is due to incomplete HTML escaping by the Xapian::MSet::snippet function. A remote attacker could exploit this by injecting malicious script, leading to arbitrary code execution in the user's browser context. This...

SUSE CVE-2026-77643

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

EUVD-2026-63667

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

Linux Distros Unpatched Vulnerability : CVE-2026-77643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML...

AZL-96924 CVE-2026-77643 affecting package xapian-core 1.4.26-2

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

CVE-2026-77643

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...