dora

dora Fonctionnalités Très rapide car nous utilisons ripgrep en arrière-plan Étapes d'exploitation/Preuve de concept pour de nombreuses clés API, permettant de rédiger un bon rapport pour la chasse aux bugs bug bounty Contrairement à de nombreux autres chercheurs de clés API, dora affiche égalemen...

CVE-2021-45046-Info

CVE-2021-45046-Info Oh non, encore un autre POC $ctx:apiversion - %dyyyy-MM-dd HH:mm:ss %-5p %c1:%L - %mnolookups%n LIENS https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/...

CVE-2022-24481-POC

CVE-2022-24481-POC En résumé Ce PoC est rétroconçu à partir d'un exp SHA1:fec933b0c46366a1fb272bfaf82a8262597a8d75 et de nombreux moteurs AV l'ont détecté comme CVE-2022-24521. Après analyse, j'ai découvert qu'il s'agit peut-être de l'exp pour CVE-2022-24481, car CVE-2022-24521 n'est pas une...

GhidraMCP

ghidraMCP ghidraMCP est un serveur Model Context Protocol permettant aux LLM de rétro-ingénierer des applications de manière autonome. Il expose de nombreux outils issus des fonctionnalités principales de Ghidra aux clients MCP...

CVE-2026-94485

A flaw was found in Next.js. During local development, the development server exposes a Model Context Protocol MCP endpoint without properly restricting cross-site requests. If a developer visits a malicious website while running the development server, an attacker can issue unauthorized requests...

CVE-2026-94486

A flaw was found in Next.js. The local development server exposes a Model Context Protocol MCP endpoint without properly restricting cross-site requests. If a developer running the development server visits a malicious website, an attacker can issue unauthorized requests to this endpoint, leading...

CVE-2026-102626

LimeSurvey Community Edition 7.4.0 is vulnerable to a Stored XSS flaw. An authenticated user with the global Surveys: create permission can inject a JavaScript-breaking value into the date_min attribute of a Date/Time question. Because the application fails to perform JavaScript-context encoding ...

CVE-2026-94485

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

generator-burp-extension

Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. npm install -g yo npm install -g generator-burp-extension Then generate your new project: yo burp-extension Burp Extension features When you generate your...

CVE-2026-94485

The Next.js framework (versions 16.0.0 through 16.3.8 ) contains a vulnerability in the next dev development server. The server exposes a Model Context Protocol (MCP) endpoint that lacks reliable restrictions on cross-site requests . If a developer visits a malicious website while the development...

EUVD-2026-91673

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486

The Next.js React framework (versions 16.0.0 through 16.3.8 ) contains an information disclosure vulnerability in the next dev development server . The server exposes a Model Context Protocol endpoint that fails to reliably restrict cross-site requests. This allows a malicious website visited by ...

EUVD-2026-91667

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

CVE-2024-57522

CVE-2024-57522 - Уязвимость хранимого XSS в Users.php - SourceCodester Packers and Movers Management System 1.0 Описание Этот репозиторий содержит Proof of Concept PoC для уязвимости хранимого межсайтового скриптинга Stored XSS в Packers and Movers Management System 1.0 от SourceCodester...

sentinel-mcp

SentinelMCP — Système de Cyberdéfense Piloté par IA Soumission au Google Cloud Hackathon — Détection et remédiation autonomes orchestrées par Google Cloud Agent Builder Vertex AI Agent , propulsées par Gemini 2.0 Flash, le Model Context Protocol MCP et l'observabilité Dynatrace. Le Problème Les...

cve-2021-45046

La RCE de log4j CVE-2021-44228 a été corrigée dans la version 2.15, mais une nouvelle vulnérabilité CVE-2021-45046 provoquant un DoS a été découverte. Voici les résultats des tests effectués. Environnement de test log4j-2.15.0 api , core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Test de ...