Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting Detection

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. !/usr/bin/env python3 -- coding: utf-8 -- """The...

Php Base64 Encoder

Encodes php payload in base64 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 class ModuleEncoder: info = "name": "Php Base64 Encoder", "description": "Encodes php payload in base64", "author": "KittySploit Team", "platform": Platform.PHP, def encodeself, payload:...

Perl Base64 Encoder

Encodes perl payload in base64 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 class ModuleEncoder: info = "name": "Perl Base64 Encoder", "description": "Encodes perl payload in base64", "author": "KittySploit Team", "platform": Platform.PERL, def encodeself,...

Php Gzinflate Base64 Encoder

Encodes php payload using deflate compression and base64 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 import zlib class ModuleEncoder: info = "name": "Php Gzinflate Base64 Encoder", "description": "Encodes php payload using deflate compression and base64",...

CMD Base64 Encoder

Encodes command-line payloads in base64 to avoid bad characters. Supports Unix/Linux shells with multiple decoding methods. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 class ModuleEncoder: info = "name": "CMD Base64 Encoder", "description": "Encodes command-lin...

JavaScript Base64 Encoder

Encodes JavaScript code in base64 with atob decoder from kittysploit import import base64 class ModuleEncoder: info = "name": "JavaScript Base64 Encoder", "description": "Encodes JavaScript code in base64 with atob decoder", "author": "KittySploit Team", "platform": Platform.JAVASCRIPT, Options...

Python Base64 Encoder

Encodes Python code in base64 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import base64 class ModuleEncoder: info = "name": "Python Base64 Encoder", "description": "Encodes Python code in base64", "author": "KittySploit Team", "platform": Platform.PYTHON, def encodeself,...

EUVD-2024-32393

Malicious code in bioql PyPI...

CVE-2025-1709 CVE-2025-1709

Several credentials for the local PostgreSQL database are stored in plain text partially base64 encoded...

CVE-2024-3824

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

WordPress Base64 Encoder/Decoder plugin <= 0.9.2 - Settings Reset via CSRF vulnerability

Settings Reset via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Base64 Encoder/Decoder versions = 0.9.2...

WordPress Base64 Encoder/Decoder plugin <= 0.9.2 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Base64 Encoder/Decoder versions = 0.9.2...

WordPress Base64 Encoder/Decoder plugin <= 0.9.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Francisco Spínola in WordPress Plugin Base64 Encoder/Decoder versions = 0.9.2...

CVE-2024-3824

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-3824

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-3822

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3823

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-3824 Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-3823 Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-3823 Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...