vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

CVE-2026-9643

The WP Meta SEO plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REQUESTURI server variable in all versions up to, and including, 4.5.18. When the plugin's wpmsTemplateRedirect hook detects a 404, it concatenates $SERVER'HTTPHOST' with the raw...

EUVD-2019-7198

Malware in sbrugna...

EUVD-2012-1652

Malware in sbrugna...

EUVD-2025-11572

Malicious code in bioql PyPI...

EUVD-2023-27823

Malicious code in bioql PyPI...

Malicious code in synthetics-sdk-broken-links (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47730 Malicious code in synthetics-sdk-broken-links (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-23737

Unauth. SQL Injection SQLi vulnerability in MainWP MainWP Broken Links Checker Extension plugin = 4.0 versions...

CVE-2025-39440

Cross-Site Request Forgery CSRF vulnerability in Rajesh Broken Links Remover broken-links-remover allows Stored XSS.This issue affects Broken Links Remover: from n/a through = 1.2.2...

CVE-2025-39440

Cross-Site Request Forgery CSRF vulnerability in Rajesh Broken Links Remover broken-links-remover allows Stored XSS.This issue affects Broken Links Remover: from n/a through = 1.2.2...

CVE-2025-39440 WordPress Broken Links Remover plugin <= 1.2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rajesh Broken Links Remover broken-links-remover allows Stored XSS.This issue affects Broken Links Remover: from n/a through = 1.2.2...

CVE-2025-39440

CVE-2025-39440 represents a CSRF-to-Stored XSS vulnerability in the WordPress plugin Broken Links Remover, affecting versions up to 1.2.2. Public details confirm the flaw origin (CSRF) and the resulting stored XSS vector, with a CVSSv3.1 base score of 7.1 (HIGH). The Connected documents do not sp...

PT-2025-17007 · Unknown · Rajesh Broken Links Remover

Name of the Vulnerable Software and Affected Versions: Rajesh Broken Links Remover versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.2.2 and earlier, update to a version that fixes this issu...

WordPress plugin Broken Links Remover 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-39440: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Rajesh Broken Links Remover broken-links-remover allows Stored XSS.This issue affects Broken Links Remover: from n/a through = 1.2.2...

CVE-2025-0809: Improper Neutralization of Input During Web Page Generation

The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to, and including, 3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

CVE-2025-23834: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows Reflected XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...

CVE-2025-23833: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows DOM-Based XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...