2516 matches found
CVE-2023-22515
Red Team Tool - Confluence Unauthorized Add Admin User CVE-2023-22515 Exploit Tool Vulnerability Scope root@kitploit: 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server =...
westone-CVE-2021-37580-scanner
westone-CVE-2021-37580-scanner Apache Shenyu is an extensible, high-performance and responsive API gateway solution applied to all micro service scenarios. An authentication bypass vulnerability exists in Apache Shenyu admin. The improper use of JWT in Shenyu admin bootstrap allows an attacker to...
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...
pwndrop
pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...
nmap-bootstrap-xsl
nmap-bootstrap-xsl Have a nice interface for checking the result of your Nmap scans. This software must not be used by military or secret service organisations. How to use 1. New Nmap scan Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan with the --stylesheet argument : root@kitploit:...
https-nj.gov---CVE-2018-14041
https-nj.gov---CVE-2018-14041 뉴저지 공식 사이트의 취약점 보고서 data-target 속성은 크로스 사이트 스크립팅XSS 공격에 취약합니다. Test 권장 사항 이 특정 문제의 수정은 getTargetFromTrigger 함수를 변경하는 것입니다. return $target 을를 다음과 같이 변경: return $document.querySelectortarget 하지만 다른 곳에서도 동일한 문제가 있는 것으로 보입니다...
Bootstrap-with-XSS
Bootstrap Historical Vulnerability PoC Collection This is a static HTML page for learning and research, which integrates multiple Proof of Concept PoC exploits for Cross-Site Scripting XSS vulnerabilities in the historical versions of the Bootstrap framework. This project aims to provide security...
Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting
A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability exploitable through Cross-Site Request Forgery CSRF. id: CVE-2025-47204 info: name: Bootstr...
CVE-2019-8331
Eng Описание CVE-2019-8331 — это уязвимость безопасности типа межсайтового скриптинга XSS, обнаруженная в Bootstrap, широко используемой библиотеке JavaScript для разработки веб-сайтов и мобильных приложений. Эта уязвимость возникает из-за того, что Bootstrap неправильно фильтрует данные,...
https-nj.gov---CVE-2018-14040
https-nj.gov---CVE-2018-14040 뉴저지 공식 사이트의 취약점 보고서 Bootstrap 4.1.2 미만 버전에서는 주요 collapse 데이터 속성에서 XSS가 가능합니다. data-target 속성과 data-parent 속성이 Cross-Site Scripting 공격에 취약합니다. Test 권장 사항 이 특정 문제에 대한 수정은 getTargetFromTrigger 함수를 변경하는 것입니다: return $target 를 다음과 같이 변경: return $document.querySelectortarg...
https-nj.gov---CVE-2018-14042
https-nj.gov---CVE-2018-14042 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute, the data-parent attribute and the data-container is vulnerable to Cross-Site Scripting attacks. Test...
https-nj.gov---CVE-2019-8331
https-nj.gov---CVE-2019-8331 Vulnearability Report of the New Jersey official site Bootstrap 4.0.0 Found in https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Vulnerability info: Medium 28236 XSS in data-template, data-content and data-title properties of tooltip/popover...
CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...
CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...
CVE-2026-62901 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-62909 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-9MR8-PWPW-3J2W vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-62899 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...