scripthunter

scripthunter Scripthunter is a tool that finds javascript files for a given website. To scan Google, simply run ./scripthunter.sh https://google.com. Note that it may take a while, which is why scripthunter also implements a notification mechanism to inform you when a scan is finished via Telegra...

CVE-2024-0195

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2023-24044

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2023-24044 Run bellow command to check CVE-2023-24044 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2015-1635

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2015-1635 Run bellow command to check CVE-2015-1635 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2020-27838

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-27838 Run bellow command to check CVE-2020-27838 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2021-24917

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2021-24917 Run bellow command to check CVE-2021-24917 -h Configurations 2. We integrated with the Telegram API to receive...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

CVE-2012-5321

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2012-5321 Run bellow command to check CVE-2012-5321 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2024-0235

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0235 Run bellow command to check CVE-2024-0235 -h Configurations 2. We integrated with the Telegram API to receive...

openredirect

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install openredirect Run bellow command to check openredirect -h Configurations 2. We integrated with the Telegram API to receive insta...

CVE-2009-0347

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2009-0347 Run bellow command to check CVE-2009-0347 -h Configurations 2. We integrated with the Telegram API to receive...

phpinfo-files-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install phpinfo-file-leaks Run bellow command to check phpinfo-file-leaks -h Configurations 2. We integrated with the Telegram API to...

MAL-2026-13413 Malicious code in @astralcore/aura-wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4a1b22725e981c18c44de0f81915a5048b58bdcacfe6935c9dfcb3dceb641c The package is a WhatsApp Baileys bot whose default configuration in config/index.js points MONGODBURI at a hardcoded shared Atlas cluster...

Malicious code in @astralcore/aura-wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4a1b22725e981c18c44de0f81915a5048b58bdcacfe6935c9dfcb3dceb641c The package is a WhatsApp Baileys bot whose default configuration in config/index.js points MONGODBURI at a hardcoded shared Atlas cluster...

MAL-2026-13351 Malicious code in spl-token-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95b625c92e85b1c0d5c10a192c70f8f82cf8d3b2ac7b66c034635b680785654 On require, index.js serializes the full process.env together with hostname, username, homedir, platform, cwd, and package metadata, base64-encodes t...

CVE-2026-7620

CVE-2026-7620 affects the WordPress plugin Notification for Telegram (versions up to 3.5.1). The issue is an authorization bypass that allows authenticated attackers with subscriber-level access and above to create, modify, or reschedule the nftb_cron_hook WordPress cron event, enabling unauthori...

EUVD-2026-36972

Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5 versions...

PT-2026-49407

Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5 versions...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 – cPanel/WHM Auth Bypass + Root Password Changer...

CVE-2026-6615

creationtimestamp| type| source ---|---|--- 2026-04-20 09:17:22+00:00| seen| Telegram/Lm9dzPhVRFRRMgyzsUGG1X5A2Qj2Q71JCDe8XQUe2-0mpLw 2026-04-20 09:17:32+00:00| published-proof-of-concept| Telegram/dHZAiReHh3JiUrfgQPfNqqAXuvlx8Y00v-wmqaVYIp72jk...