dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

corsair_scan

Corsairscan에 오신 것을 환영합니다 Corsairscan은 CORSCross-Origin Resource Sharing 잘못된 설정을 테스트하는 보안 도구입니다. CORS는 웹 페이지의 제한된 리소스를 첫 번째 리소스가 제공된 도메인 외부의 다른 도메인에서 요청할 수 있도록 하는 메커니즘입니다. 이것이 제대로 구성되지 않으면 승인되지 않은 도메인이 해당 리소스에 액세스할 수 있습니다. CORS란 무엇인가요? CORS는 HTTP 헤더 기반 메커니즘으로, 서버가 자신의 출처도메인, 스키마 또는 포트 이외의 다른 출처에서...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Agentejo Cockpit 0.10.2 - Cross-Site Scripting

Agentejo Cockpit 0.10.2 contains a reflected cross-site scripting vulnerability due to insufficient sanitization of the to parameter in the /auth/login route, which allows for injection of arbitrary JavaScript code into a web page's content. id: CVE-2020-14408 info: name: Agentejo Cockpit 0.10.2 ...

FortiWeb - Cross Site Scripting

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points. id: CVE-2021-22122 info: name:...

ChangeTower

ChangeTower ChangeTower는 웹 페이지의 변경 사항을 감시하고 변경이 있을 때 알림을 받을 수 있도록 도와주는 도구로, Go로 작성되었습니다. 이 도구는 다른 사람보다 먼저 새 사이트에서 작업하기 위해 웹 페이지가 업데이트되었는지 여부를 파악하는 데 유용합니다. 설치 방법 ChangeTower를 설치하려면 go1.16+가 필요합니다. 다음 명령어를 실행하여 레포지토리를 가져오세요. go get -v github.com/Dc4ts/ChangeTower OS에 Go가 설치되어 있지 않다면 릴리스 페이지에서 미리 빌...

CVE-2026-5782

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Loglama.net TurkHotspot due to the improper neutralization of input during web page generation. This vulnerability allows an attacker to execute scripts in a victim's browser. The issue affects versions of TurkHotspot through 2026-10-...

CVE-2026-102798 WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...

EUVD-2026-91589

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...

EUVD-2026-91067

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting XSS. This issue affects CAPEC-63: before 3.0b63...

CVE-2021-42392-Detect

CVE-2021-42392-Detect 概要 このスクリプトは、指定されたIPリストに対して脆弱なH2サーバーを検出します。H2コンソールのWebページを識別し、アクセス制限の有無を確認できます。 使用方法 IPリストを含むファイルを作成し、ファイル名を「IP.txt」にします。「IP.txt」と「h2-detect.py」を同じディレクトリに配置し、スクリプトを実行します。 ここで「IP.txt」はスクリプトにハードコードされたデフォルトのファイル名ですが、スクリプトは任意のファイル名を入力引数として受け取ることもできます。...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References:...

CVE-2026-102394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through 6.8.4...

CVE-2026-103339 WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet Metform metform allows Stored XSS.This issue affects Metform: from n/a through 4.3.0...

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97253

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0...

CVE-2026-103051

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - CentralNotice extension allows Stored XSS. This issue affects Mediawiki - CentralNotice extension: before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-103049

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1...

UBUNTU-CVE-2026-103051

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - CentralNotice extension allows Stored XSS. This issue affects Mediawiki - CentralNotice extension: before 1.46.1, 1.45.5, 1.43.10...