fleet

Noticias · Informar de un error · Documentación · ¿Por qué código abierto? · Arte Plataforma de código abierto para equipos de TI y seguridad con miles de computadoras. Diseñada para APIs, GitOps, webhooks, YAML y humanos. ¿Para qué sirve? Fleet te ofrece un único sistema para proteger y mantener...

samydeluxe

Este repositorio no tiene un README...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

sitedorks

想要获取最新更新？ 请务必 ⭐ 这个仓库！ ⭐ 现在也可用，Sitedorks Web ⭐ 关于 SiteDorks 使用 Google、Bing、Brave、Ecosia、Yahoo 或 Yandex 搜索带有多个网站的关键词。已提供默认的列表，其中包含 Moltbook、Grok、Github、Gitlab、Surveymonkey、Trello 等。目前，默认列表包含 635 个可用于 Dork 的网站。 默认情况下，文件中包含以下类别： ai 6 analysis 13 cloud 105 comm 83 ddns 3 dev 69 docs 80 edu 13 events 1...

Subscribe to Category <= 2.7.4 - SQL Injection

The Subscribe to Category contains a sqlinjection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL commands, exploit requires user interaction. id: CVE-2023-32590 info: name: Subscribe to Category = 2.7.4 - SQL Injection author:...

CVE-2021-39476

CVE-2021-39476 发现 PhoenixCart 1.0.8.0 中存在多个 XSS 漏洞 同一页面上的 2 个 XSS 漏洞 "编辑分类标题以用于 SEO：" "编辑分类描述" 链接：https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - 跨站脚本（XSS）漏洞在 "index.php/category" - 脆弱字段："Category Name" 描述 ：Book Store Management System v1.0 被发现存在跨站脚本（XSS）漏洞，位于 "/bsmsci/index.php/category"。此漏洞允许攻击者通过向 "Category Name" 字段注入特制载荷来执行任意 web 脚本或 HTML。 脆弱产品版本 ：Book Store Management System v1.0 CVE ...

fang

Este repositorio no tiene un README...

CVE-2021-46071

CVE-2021-46071 Título del Exploit: Vehicle Service Management System - 'Category List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIO Referencias:...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 es una vulnerabilidad de inyección SQL identificada en el sistema MODAPS de NASA EOSDIS, causada por una validación de entrada incorrecta en el parámetro category. Esta vulnerabilidad permite a los atacantes acceder a datos sensibles y ejecutar consultas SQL arbitrarias mediante la...

CVE-2025-29602

CVE-2025-29602 - FlatPress CMS 1.3.1 中的存储型跨站脚本XSS漏洞 描述 Flatpress CMS 1.3.1 的管理面板中存在一个存储型跨站脚本XSS漏洞。具有管理员权限的攻击者可以向系统中注入恶意JavaScript载荷，该载荷会被持久存储。当普通用户访问被篡改的页面（如博客文章）时，注入的载荷会在受害者的浏览器中自动执行。 受影响的产品 Flatpress 版本: 1.3.1 组件: 编辑分类 ⚠️ 影响 窃取会话Cookie 钓鱼攻击 远程代码执行（通过JavaScript） 将用户重定向到恶意网站 POC :9 代码区域 Flatpress...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - Unauthenticated SQL Injection Description The Subscribe to Category plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

LoLLMS WebUI < 9.8 - Path Traversal

parisneo/lollms-webui contains a path traversal caused by improper handling of 'category' parameter in /listpersonalities endpoint, letting attackers list arbitrary directories, exploit requires control over 'category' parameter. id: CVE-2024-4322 info: name: LoLLMS WebUI 9.8 - Path Traversal...

Mingsoft MCMS 5.2.9 - SQL Injection

Mingsoft MCMS v5.2.9 contains a SQL injection caused by unsanitized categoryType parameter at /content/list.do, letting attackers execute arbitrary SQL commands, exploit requires crafted input. id: CVE-2023-50578 info: name: Mingsoft MCMS 5.2.9 - SQL Injection author: ritikchaddha severity:...

CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE

项目名称和仓库 URL： 使用 PHP 和 MySQL 的 Maid Hiring Management System 漏洞类型： 客户端请求伪造 受影响版本： v1.0 💣漏洞描述： PHPGurukul Hiring Management System 的管理面板存在跨站请求伪造（CSRF）漏洞，攻击者可以通过诱骗已认证的管理员访问恶意站点来添加任意招聘类别。这可能导致数据污染和未经授权的管理员级更改。 👩‍💻影响： 未经授权的类别创建 🛜概念验证（PoC） 1. 存在一个类别添加功能，仅允许已认证的管理员添加类别。 2. 用于向端点 /admin/add-category.php 发送...

CVE-2026-101033

KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from other households to read their category names, budgets, and colors, breaking household isolation...

CVE-2025-25461

📌 CVE-2025-25461 - SeedDMS 6.0.29 存储型跨站脚本（XSS）漏洞 📝 描述 SeedDMS 6.0.29 中存在一个存储型跨站脚本（XSS）漏洞。 拥有 "添加分类" 权限的用户或恶意管理员可以向分类名称字段注入恶意 XSS 载荷。 当文档随后与该分类关联时，载荷会被存储在服务器上，并在未经过滤或输出编码的情况下渲染。 这导致任何查看文档的用户浏览器执行该 XSS 载荷。 🎯 受影响产品 软件： SeedDMS 版本： 6.0.29 组件： 分类名称字段 ⚠️ 影响 会话劫持 数据泄露 钓鱼攻击 远程代码执行（通过 JavaScript） 🔥...

CVE-2026-101033 KitchenOwl through 0.7.10 IDOR via unchecked category ID

KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from other households to read their category names, budgets, and colors, breaking household isolation...

CVE-2026-101033

The KitchenOwl application (versions through 0.7.10 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists because the application fails to verify if provided category IDs belong to the caller's household during expense and item operations. This allows authenticated attac...

CVE-2026-101033: Authorization Bypass Through User-Controlled Key

KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from other households to read their category names, budgets, and colors, breaking household isolation...