Carnivore

Rilasciato come open source da NCC Group Plc - https://www.nccgroup.com/ Sviluppato da Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Rilasciato sotto licenza AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Strumento di Valutazione Esterna...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe Informazioni Installazione Utilizzo Esempi Prossimamente Riconoscimenti Informazioni Trovare tutte le cose on-prem Microsoft per password spraying ed enumerazione. Lo strumento utilizza un elenco di sottodomini comuni associati al tuo dominio apex target per tentare di scoprire istanze...

CVE-2020-10130

CVE-2020-10130 - SearchBlox Produkt vor V-9.1 ist anfällig für Business-Logik-Umgehung Produktbeschreibung: SearchBlox vereinfacht die Unternehmenssuche für komplexe Organisationen. Die intuitiven und intelligenten Werkzeuge von SearchBlox bieten eine sofort einsatzbereite Einrichtung, sichere...

CVE-2020-6308

CVE-2020-6308 Script de exploit para SSRF do SAP Business Objects Este é um script simples em Golang para automatizar a exploração da CVE-2020-6308. O repositório original do Github não apresentava automação https://github.com/InitRoot/CVE-2020-6308-PoC, obrigado @InitRoot, então este foi criado...

PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. id: CVE-2023-4115 info: name: PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting author:...

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

Dyn Business Panel WordPress plugin = 1.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter in output, letting attackers execute scripts in the context of high privilege users, exploit requires victim to click a malicious link. id: CVE-2024-130...

Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Oracle Fusion - Directory Traversal/Local File Inclusion

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." id: CVE-2020-14864 info: name: Oracle Fusion - Directory Traversal/Local File Inclusion author: Ivo Palazzolo @palaziv severity: high...

Oracle Business Intelligence Publisher - XML External Entity Injection

Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

Business Directory Plugin <= 6.4.2 - SQL Injection

The Business Directory Plugin Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

SAP Web Application Server 6.x/7.0 - Open Redirect

frameset.htm in the BSP runtime in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter. id: CVE-2005-3634 info: name: SAP Web...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

CVE-2024-30896

CVE-2024-30896 Riepilogo Un difetto nella logica di business di influxdb consente agli utenti che possiedono un token allAccess valido di escalare i propri privilegi a livello di operatore elencando i token di autorizzazione correnti. Scenario L'attaccante potrebbe essere un utente a cui un...

Awesome-BEC

Awesome-BEC Repository mit Angriffs- und Verteidigungsinformationen für Untersuchungen zu Business Email Compromise Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365-Lizenzierung Microsoft-Portale Azure-App-IDs Microsoft First-Party-App-IDs &...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 इस रिपॉजिटरी में ZeroZenX के शोध आर्टिफैक्ट और CVE-2025-61882 के लिए एक पूर्ण रूप से कार्यशील एक्सप्लॉइट इम्प्लीमेंटेशन शामिल है, जो केवल अधिकृत वातावरणों में रक्षात्मक शोध, इंसिडेंट रिस्पॉन्स, डिटेक्शन इंजीनियरिंग और पैच सत्यापन का समर्थन करने के लिए प्रद...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle ha appena divulgato una nuova vulnerabilità CVE-2025-61884; lo script di rilevamento per tale vulnerabilità si trova in questo repository o in originale qui:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Come riportato dall'avviso di...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Vulnerabilità nel prodotto Oracle Marketing di Oracle E-Business Suite componente: Marketing Administration. Come funziona questo metodo di rilevamento? Questo template Nuclei rileva le istanze di Oracle E-Business Suite vulnerabili a CVE-2025-53072 e CVE-2025-6248...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें डिटेक्शन का प्रदर्शन root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...