wp-mhn

wp-mhn Integra o seu Modern Honeypot Network Server e o seu Wordpress Blog via API REST do MHN e shortcodes do WP Instalação e Uso 1. Baixe o wp-mhn como um arquivo zip, ou clone o repositório e compacte-o. 2. Edite o config.sample.php com informações correspondentes ao seu servidor MHN. 3...

horus

Projekt | Horus Inhaltsverzeichnis 🚀 Über Horus ⚡ Installations- und Nutzungsanweisungen ⚙️ API-Konfiguration 🔮 Geplante Funktionen 🤝 Aktuelle Maintainer 🛠️ Mitwirken 📧 Kontakt 🤝 Danksagungen 🚀 Über Horus Horus ist ein umfassendes All-in-One-Werkzeug zur Unterstützung von Ermittlungen – von der...

53R3N17Y

53R3N17Y Script baseado em Python para Coleta de Informações. Para obter os detalhes, é usado hackertarget.com. Há um limite de 100 chamadas de API por dia a partir de um único endereço IP. Atualização root@kitploit: ----- | | |--o--| ╒ 53R3N17Y ════════════════════════════════════╕ ---------´...

CVE-2025-4796

CVE-2025-4796 eventin e atualizar o e-mail do palestrante para um e-mail que eles controlam. Então o atacante pode usar a redefinição de senha do WordPress para assumir a conta do administrador. requisitos: python 3.8 ou superior requests instalar requests: pip install requests uso execute o scri...

CVE-2026-56708

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...

pysho

pysho Strumento basato su Python per eseguire query Shodan tramite l'API di Shodan Ottieni lo strumento: root@kitploit: git clone https://github.com/Kr0ff/pysho python -m pip install -r requirements.txt chmod +x pysho.py ./pysho Esempi di utilizzo: root@kitploit: Perform a check on your Shodan AP...

CVE-2026-56708 Grav API Plugin before 1.0.16 SSRF via DNS Rebinding

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...

EUVD-2026-65206

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...

CVE-2026-56708

The Grav API plugin before version 1.0.16 is affected by a server-side request forgery (SSRF) vulnerability in its webhook delivery mechanism. The root cause is a DNS rebinding attack that bypasses hostname validation: an attacker who controls the authoritative DNS for a configured webhook hostna...

CVE-2018-7690

CVE-2018-7690 L'API REST di SSC contiene vulnerabilità di Insecure Direct Object Reference IDOR che consentono agli utenti autenticati di accedere a dettagli arbitrari degli utenti Local e LDAP tramite il metodo POST e a dettagli arbitrari dei progetti Fortify di altri utenti tramite il metodo GE...

DEBIAN-CVE-2026-55371

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exrattrsetbytes. The public setter validates the...

DEBIAN-CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

wpUsersScan

wpUsersScan Informazioni su wpUsersScan Enumera l'elenco degli utenti dei siti WordPress tramite l'API REST / CVE-2017-5487, WordPress 4.7.1 - Enumerazione degli nomi utente Utilizzo root@kitploit: $ python wpUsersScan.py URL Come installare Clonazione Clona il repository con: root@kitploit: $ gi...

CVE-2026-55059 OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059

OpenEXR (the reference implementation for the EXR deep image format) versions prior to 3.2.10, 3.3.12, and 3.4.13 contain a heap out-of-bounds write in Imf_4_0::SampleCountChannel::set(). The root cause is that the row-based sample-count setter computes the target Y coordinate using dataWindow.mi...

Linux Distros Unpatched Vulnerability : CVE-2026-55059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12...

UBUNTU-CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-38470

CVE-2026-38470 is a broken access control vulnerability in the API user endpoint of GazellePW (GazellePosterWall) , specifically at commit 86c4bedf727691b5a97af42a4864869d18446449. An unprivileged, authenticated user holding a standard user-created API token can enable or disable arbitrary user a...

Linux Distros Unpatched Vulnerability : CVE-2026-55371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions...