Navidrome < 0.53.0 - Authenticated SQL Injection

Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like password=... in the URL ORM Leak. Furthermore, the names of the parameters are not...

Ozette Plugins - Cross-Site Request Forgery

An attacker can update, create, and remove the site's mobile redirects via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. id: CVE-2023-23897 info: name: Ozette Plugins - Cross-Site Request Forgery author: popcorn94 severity: medi...

XWiki >= 6.2-milestone-1 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-43325 info: name: MooSocial 3.1.8 - Cross-Sit...

UC Gateway Investment SiteEngine v5.0 - Open Redirect

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action. id: CVE-2008-7269 info: name: UC Gateway Investment SiteEngine v5.0 - Open...

MajorDoMo - Cross-Site Scripting

MajorDoMo contains a reflected XSS caused by unsanitized $qry parameter in command.php, letting attackers inject arbitrary JavaScript via crafted URLs, exploit requires victim to visit malicious URL. id: CVE-2026-27176 info: name: MajorDoMo - Cross-Site Scripting author: DhiyaneshDk severity:...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

Gradio - Open Redirect

Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. id: CVE-2024-8021 info: name: Gradio - Open Redirect author: DhiyaneshDK severity: medium description: | Gradio...

Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)

It is possible to inject arbitrary JavaScript code into the /browse endpoint of the Calibre content server, allowing an attacker to craft a URL that when clicked by a victim, will execute the attacker’s JavaScript code in the context of the victim’s browser. If the Calibre server is running with...

iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting

iBuildApp WordPress plugin through 0.2.0 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13326 info:...

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Dimostrazione rapida e approssimativa di CVE-2014-0160 di Jared Stafford [email protected] e l'autore rinuncia al copyright su questo codice sorgente. ''' Ho modificato questo script per accettare qualsiasi file di URL come input...

exploit-CVE-2016-8016-25

McAfee Virus Scan per Linux: molteplici vulnerabilità remote QUESTO EXPLOIT E TUTTO IL CODICE IN QUESTO REPO SONO STATI RIMOSSI PER EVITARE QUALSIASI PROBLEMA RELATIVO ALLA VIOLAZIONE DI QUALSIASI LICENZA MCAFEE McAfee VirusScan Enterprise for Linux è una soluzione antivirus aziendale di McAfee. ...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 e 2.4.50 Esecuzione Remota di Codice 🚨 CVE-2021-42013 si basa sulla vulnerabilità precedentemente identificata, CVE-2021-41773. Nonostante gli sforzi del team di Apache per affrontare CVE-2021-41773 nella versione 2.4.50, indagini successive hanno rivelato che la...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram नोट्स ऑडियो लीकेज URL निष्कर्षण के माध्यम से ठीक किया गया और पुरस्कृत 🛡️ भेद्यता सारांश 05/2025 में, मैंने इंस्टाग्राम वेब में एक भेद्यता खोजी जो किसी भी उपयोगकर्ता को एक नोट से मूल वीडियो फ़ाइल निकालने और पृष्ठभूमि ऑडियो तक पहुँचने की अनुमति देती थी, जो सार्वजनिक रूप से उपलब्ध नहीं...

CVE-2020-35262

CVE-2020-35262: XSS persistente nel router Digisol DG-HR3400 Descrizione della vulnerabilità È stato identificato che l'endpoint vulnerabile non dispone di validazione degli input lato server né di filtraggio lato client per l'iniezione di script dannosi. Un aggressore può utilizzare questa...

CVE-2026-64849

CVE-2026-64849 Altro root@kitploit: POST /api/2.0/mlflow/webhooks HTTP/1.1 Host: Content-Type: application/json "url": "https://httpbin.org/redirect-to?url=http://169.254.169.254/latest/meta-data/", "name": "poc", "events": "action": "CREATED", "entity": "REGISTEREDMODEL" root@kitploit: POST...

zenbuster

Informazioni ZenBuster è uno strumento di enumerazione URL multi-thread e multi-piattaforma scritto in Python da Zach Griffin @0xTas. Ho scritto questo strumento per approfondire la mia familiarità con Python e per aumentare la mia comprensione degli strumenti di cybersecurity in generale...

CVE-2020-17453

Badges Licença MIT Instalação Instale o CVE-2020-17453 com npm root@kitploit: npm install cve-2020-17453 -g Uso Exemplo para URL única root@kitploit: CVE-2020-17453 -u http://example.com Uso Exemplo para lista de URLs...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Crediti L'impatto della vulnerabilità è al momento limitato, ma grazie a https://x.com/chudyPB per aver fornito un'idea intelligente di bypass. https://x.com/chudyPB...

url-status-checker

Status Checker URL Status Checker v2.1 Status Checker è uno script Python che controlla lo stato di uno o più URL/domini e li categorizza in base ai loro codici di stato HTTP. Versione 2.1.0 Funzionalità Controlla lo stato di uno o più URL/domini. Richieste HTTP asincrone per prestazioni...