2516 matches found
CVE-2023-22515
Herramienta de Red Team - Explotación de la vulnerabilidad CVE-2023-22515 para agregar administrador no autorizado en Confluence Versiones afectadas root@kitploit: 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 =...
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...
Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting
A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability exploitable through Cross-Site Request Forgery CSRF. id: CVE-2025-47204 info: name: Bootstr...
westone-CVE-2021-37580-scanner
westone-CVE-2021-37580-scanner Apache Shenyu is an extensible, high-performance and responsive API gateway solution applied to all micro service scenarios. An authentication bypass vulnerability exists in Apache Shenyu admin. The improper use of JWT in Shenyu admin bootstrap allows an attacker to...
pwndrop
pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...
https-nj.gov---CVE-2018-14040
https-nj.gov---CVE-2018-14040 Informe de vulnerabilidad del sitio oficial de Nueva Jersey En Bootstrap anterior a 4.1.2, XSS es posible en el atributo data del collapse principal. El atributo data-target y el atributo data-parent son vulnerables a ataques de Cross-Site Scripting. Test RECOMENDACI...
nmap-bootstrap-xsl
nmap-bootstrap-xsl Have a nice interface for checking the result of your Nmap scans. This software must not be used by military or secret service organisations. How to use 1. New Nmap scan Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan with the --stylesheet argument : root@kitploit:...
https-nj.gov---CVE-2018-14041
https-nj.gov---CVE-2018-14041 Informe de Vulnerabilidad del sitio oficial de Nueva Jersey El atributo data-target es vulnerable a ataques de Cross-Site Scripting. Test RECOMENDACIÓN La solución para este problema específico podría ser cambiar la función getTargetFromTrigger. return $target a:...
Bootstrap-with-XSS
Bootstrap Historical Vulnerability PoC Collection This is a static HTML page for learning and research, which integrates multiple Proof of Concept PoC exploits for Cross-Site Scripting XSS vulnerabilities in the historical versions of the Bootstrap framework. This project aims to provide security...
CVE-2019-8331
Eng Описание CVE-2019-8331 — это уязвимость безопасности типа межсайтового скриптинга XSS, обнаруженная в Bootstrap, широко используемой библиотеке JavaScript для разработки веб-сайтов и мобильных приложений. Эта уязвимость возникает из-за того, что Bootstrap неправильно фильтрует данные,...
https-nj.gov---CVE-2018-14042
https-nj.gov---CVE-2018-14042 Informe de vulnerabilidad del sitio oficial de Nueva Jersey En Bootstrap anterior a la versión 4.1.2, es posible un XSS en el atributo principal de datos de collapse. El atributo data-target, el atributo data-parent y el atributo data-container son vulnerables a...
https-nj.gov---CVE-2019-8331
https-nj.gov---CVE-2019-8331 Vulnearability Report of the New Jersey official site Bootstrap 4.0.0 Found in https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Vulnerability info: Medium 28236 XSS in data-template, data-content and data-title properties of tooltip/popover...
CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...
CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...
CVE-2026-62901 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-62909 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-R6MH-95JW-G7QG vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-9MR8-PWPW-3J2W vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...