AdminSnatcher

AdminSnatcher Let's Snatch The Admin Panel Of Any Website In Seconds. Usage: 1. Go To The Terminal and cd To The Path. 2. Type: python3 adminsnatcher.py --url https://example.com Requirements 1. Python 3 2. Following Libraries Should Be Installed In Python3: Requests Random Colorama Why Only...

CVE-2021-43032

CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-password-disclosure-issue-in-the-web-interface A password-disclosure issue in the web interface on certain TP-Link devices allows a remote malicious user to get full administrative access to the web panel. This affects WA901ND devices prior to 3.16.9201211 beta, and Archer C5, Arch...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

FuguHub-8.4-Authenticated-RCE-CVE-2024-27697

FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Server Software. The version tested was the debian version at this link: https://fuguhub.com/articles/FuguHub-for-Debian An issue in Real Time Logic LLC FuguHub v.8.4 allows a local attacker to execute arbitrary code via a crafted script to t...

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver Unauthenticated CSRF Account TakeOver in BigTreeCMS v4.4.14 All searchable modules in the admin panel of BigTreeCMS v4.4.14 are vulnerable to reflected DOM-XSS via the URI. Search queries are reflected on the page without proper sanitization...

Admin-Panel_Finder

Admin Panel Finder A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this...

Admin-Scanner

Admin-Scanner Website Admin Panel Finder How To Install? Linux/pc sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner How to Install? Termux/Android pkg update && pkg upgrade pkg install python3 p...

Fast-Google-Dorks-Scan

Fast Google Dorks Scan The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. Usage example: chmod +x...

CVE-2022-36433

CVE-2022-36433 Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading ...

CVE-2022-35501

CVE-2022-35501 Stored Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The post creation functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the title field, leading to XSS...

CVE-2025-44108-SXSS

CVE-2025-44108 - Stored cross site scriptingXSS vulnerabilities in the FlatPress CMS 1.3.1 Description A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS 1.3.1. An attacker with admin privileges can inject a malicious JavaScript payload into the...

CVE-2022-36432

CVE-2022-36432 Cross-site Scripting XSS in Preview functionality in Amasty Blog Pro for Magento 2 Description The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by...

CVE-2026-76564

Stored XSS via User-Agent in Admin Order View in PhocaCart PhocaCart ≤ 6.1.7 — 인증되지 않은 공격자가 체크아웃을 통해 XSS 페이로드를 저장합니다. 관리자 브라우저 컨텍스트에서 실행됩니다 요약 Joomla용 PhocaCart 6.1.7은 storeuseragent 구성 옵션이 활성화된 경우 체크아웃 요청의 원시 HTTP User-Agent 헤더를 주문 데이터베이스 테이블에 저장합니다. 저장된 값은 이후 Adminview.php의 itemText를 통해 HTML 인코...

cangibrina

/ | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | \,|| ||, ||./|| ||| ||,| |/ Beta - v0.8.7 Dashboard Finder 영어 Português 영어 대시보드 파인더 Cangibrina는 멀티 플랫폼 도구로, 워드리스트, 구글, nmap 및 robots.txt를 이용한 무차별 대입 공격을 통해 사이트의 관리자 대시보드를 얻는 것을 목표로 합니다. 요구 사항: Python 2.7 mechanize...

CVE-2022-42176

PCSecure V5.0.8.xw - 구성 파일에 하드코딩된 자격 증명 사용으로 관리자 패널 접근 가능 요약 공급업체: PCTechSoft SAS 제품: PCSecure 영향을 받는 버전: 5.0.8.xw 코드네임: PapiQuieroPollo00 취약점 유형: 하드코딩된 자격 증명 사용 CWE-798 CVSSv3.1 벡터: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 기본 점수: 7.8 높음 익스플로잇 가능 여부: 없음 CVE ID: CVE-2022-42176 설명...

CVE-2018-16987

CVE-2018-16987 This is a cleartext storage of sensitive information & sensitive information exposure vulnerability I found in Squash TM during a penetration test. SquashTM Squash TM is a web interface used to manage test cases. Link to the project Description Squash TM through at least 1.18.0...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc MajorDomoMajor Domestic Module의 관리자 패널 PHP 콘솔 기능을 통해 인증되지 않은 원격 코드 실행을 악용하는 개념 증명PoC입니다. 취약점 MajorDoMo의 관리자 패널은 /admin.php를 통해 PHP 평가 콘솔을 노출합니다. panel.class.php에서 인증 리디렉션 후 exit가 누락되어 AJAX 핸들러 incpanelajax.php가 무조건 포함되므로, 인증되지 않은 모든 HTTP 요청이 eval에 도달할 수 있습니다. 공격자는 자격...

coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS - RCE PoC Exploits This repo contains XSS vectors for CVE-2015-0345 APSB15-07 that allow for the ability to gain remote command execution on ColdFusion installations. This exploit is only valid for ColdFusion 10 and 11 installations. Specifically, ColdFusion 11, Update 11...

Explotacion-CVE-2023-32315-Openfire

🔍 CVE-2023-32315 설명: CVE-2023-32315 취약점은 Openfire 서버에 영향을 미치며, 공격자가 유효한 자격 증명 없이 웹 관리 패널의 로그인을 우회할 수 있게 합니다. 이 익스플로잇은 관리자 사용자를 추가하여 공격자가 악성 플러그인을 업로드하고 웹 셸을 획득할 수 있게 합니다. ⚙️ 작동 방식 CVE-2023-32315는 Openfire의 취약점으로, 초기 설정 마법사의 JSP/setup/setup-s/...에 설정이 완료된 후에도 접근할 수 있게 합니다. 리터럴 문자 대신...