3540 matches found
sniffly
Sniffly2 Sniffly2 est une variante de Sniffly qui abuse des en-tΓͺtes HTTP Strict Transport Security et de l'API Performance Timing afin de dΓ©tecter votre historique de navigation dans les navigateurs basΓ©s sur Chromium. DΓ©mo Visitez http://diracdeltas.github.io/sniffly dans...
CVE-2026-15916
Drupal core 's Image module suffers from a missing authorization flaw (forceful browsing) that allows information disclosure of image style derivatives. The module does not sufficiently check access when derivative files are served via a file stream other than private://. The vulnerability is mit...
CVE-2026-16644
An incorrect authorization flaw in the Drupal Webform REST contrib module (which exposes webform submissions via REST endpoints) allows forceful browsing . The module does not sufficiently validate the parent webform's permissions for create, view, and update operations. The advisory classifies t...
CVE-2026-16645
Drupal PhotoSwipe (contrib module) contains a missing authorization flaw in its image gallery display formatter that allows forceful browsing of images. The module failed to sufficiently check access permissions when viewing images via the lightbox gallery formatter. Affected versions are < 3....
CVE-2026-18985
CVE-2026-18985 is an Incorrect Authorization vulnerability in the Drupal contrib module Edit in-place field (versions 0.0.0 through 2.1.1). The module provides formatters for in-place editing within Views and other displays but does not sufficiently verify access when editing entities, allowing a...
PartyLoud
Partyloud Retrouvez votre vie privΓ©e GΓ©nΓ©rez une fausse navigation web et attΓ©nuez le pistage CodeFactor PartyLoud est un outil gratuit hautement configurable et simple qui vous aide Γ empΓͺcher le pistage directement depuis votre terminal Linux, sans compΓ©tences particuliΓ¨res. Une fois dΓ©marrΓ©,...
feroxbuster
!WARNING Security Notice β Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...
BlueNet Technology Clinical Browsing System 1.2.1 - Sql Injection
A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack...
Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API
Piwigo = 16.3.0 contains an information disclosure vulnerability caused by the pwg.history.search API method lacking adminonly restriction, letting unauthenticated users access full browsing history, exploit requires no authentication id: CVE-2026-27833 info: name: Piwigo 16.3.0 - Unauthenticated...
CVE-2022-43110
CVE-2022-43110 ΠΠΎΠΏΠΎΠ»Π½ΠΈΡΠ΅Π»ΡΠ½Π°Ρ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΡ Voltronic Viewpower/Pro ΠΈ ΡΠ΅Π±ΡΠ΅Π½Π΄ΠΈΠ½Π³ΠΈ/ΠΏΡΠΎΠΈΠ·Π²ΠΎΠ΄Π½ΡΠ΅ ΠΡΠΎΠ³ΡΠ°ΠΌΠΌΠ½ΠΎΠ΅ ΠΎΠ±Π΅ΡΠΏΠ΅ΡΠ΅Π½ΠΈΠ΅ Π΄Π»Ρ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ ΠΠΠ Π΄ΠΎΠ»ΠΆΠ½ΠΎ ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡ ΡΠΎΠ»ΡΠΊΠΎ Π½Π°Π΄Π»Π΅ΠΆΠ°ΡΠΈΠΌ ΠΎΠ±ΡΠ°Π·ΠΎΠΌ Π°ΡΡΠ΅Π½ΡΠΈΡΠΈΡΠΈΡΠΎΠ²Π°Π½Π½ΠΎΠΌΡ ΠΈ Π°Π²ΡΠΎΡΠΈΠ·ΠΎΠ²Π°Π½Π½ΠΎΠΌΡ Π°Π΄ΠΌΠΈΠ½ΠΈΡΡΡΠ°ΡΠΎΡΡ Π½Π°ΡΡΡΠ°ΠΈΠ²Π°ΡΡ ΡΠΈΡΡΠ΅ΠΌΡ ΡΠ΅ΡΠ΅Π· Π²Π΅Π±-ΠΈΠ½ΡΠ΅ΡΡΠ΅ΠΉΡ. ΠΠ·-Π·Π° CWE-425: ΠΏΡΡΠΌΠΎΠΉ...
EvilNeko
EvilNeko EvilNeko β ΡΡΠΎ ΠΏΡΠΎΠ΅ΠΊΡ Π΄Π»Ρ Π°Π²ΡΠΎΠΌΠ°ΡΠΈΠ·Π°ΡΠΈΠΈ ΠΎΡΠΊΠ΅ΡΡΡΠΎΠ²ΠΊΠΈ ΠΊΠΎΠ½ΡΠ΅ΠΉΠ½Π΅ΡΠΎΠ² ΠΈ ΡΠ΅Π°Π»ΠΈΠ·Π°ΡΠΈΠΈ Π°ΡΠ°ΠΊ Browser in the Browser BITB Π΄Π»Ρ ΠΊΡΠ°ΡΠ½ΡΡ ΠΊΠΎΠΌΠ°Π½Π΄. ΠΠ΄ΠΎΡ Π½ΠΎΠ²Π»ΡΠ½ ΠΈΡΡΠ»Π΅Π΄ΠΎΠ²Π°Π½ΠΈΡΠΌΠΈ, ΠΏΡΠΎΠ²Π΅Π΄ΡΠ½Π½ΡΠΌΠΈ Mr. d0x Π·Π΄Π΅ΡΡ, ΠΈ ΡΠ°Π·Π²ΠΈΠ²Π°Π΅Ρ ΠΈΠ΄Π΅ΠΈ ΠΏΡΠΎΠ΅ΠΊΡΠ° EvilNoVNC. Π¦Π΅Π»Ρ ΠΏΡΠΎΠ΅ΠΊΡΠ° β ΡΠ»ΡΡΡΠΈΡΡ ΡΡΡΠ΅ΡΡΠ²ΡΡΡΠΈΠ΅ ΠΎΡΠΊΡΡΡΡΠ΅ ΠΈΠ½ΡΡΡΡΠΌΠ΅Π½ΡΡ Π΄Π»Ρ...
psc
PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...
reflector
reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...
CVE-2006-3392
C'est un outil simple pour exploiter les vulnΓ©rabilitΓ©s Webmin 1.290 / Usermin 1.220 - Divulgation Arbitraire de Fichiers. Comment l'utiliser : 1. Lancez le script python exploit.py . 2. Entrez le port . 3. SΓ©lectionnez le dossier que vous souhaitez visualiser . β Important β Nous ne sommes pas...
mitaka
Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...
firefox: thunderbird: Mitigation bypass in the Safe Browsing component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...
firefox: thunderbird: Mitigation bypass in the Safe Browsing component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...
firefox: thunderbird: Mitigation bypass in the Safe Browsing component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...
CVE-2026-77815 Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
CVE-2026-77814 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...