27760 matches found
CVE-2025-2907
CVE-2025-2907 エクスプロイト 詳細 公開日 : 2025-04-04 更新日 : 2025-03-28 深刻度 : 緊急 CVSS スコア: 9.8 CWE : CWE-862: 認証欠如 影響を受けるバージョン : n/a から 12.3.1 までの全バージョン 研究者 : https://www.wordfence.com/threat-intel/vulnerabilities/researchers/mike-gozdiskowski CVSS ベクトル CVSS バージョン : 9.8 ベクトル文字列 :...
ssl-certificate-expiry-date-checker
sslcertificateexpirydatechecker 어떤 인증서가 만료될 예정이며 갱신이 필요한지 확인합니다. 스캔 결과에서 다양한 정보만료일, 발급자, 서명, 일련 번호 등를 찾습니다. 조직의 SSL 인증서 관리자라면 동료, 팀에서 목록을 수집하고 인증서의 만료일을 확인하세요. SSL 인증서가 만료되기 전에 상세 결과로 사용자 알림을 보냅니다 WEBHOOK, Telegram-Bot, Slack.... 다른 유사 도구와의 차이점: 도메인별로 프록시 사용을 선택적으로 설정할 수 있습니다. 예를 들어, 제한된 사설 환경...
pepeScraper
pepeScraper - 4chan 스크래퍼 4chan을 위한 완전한 스크래퍼 정말 빠릅니다. pepeScraper는 검색 컨텍스트를 활용하여 원하는 결과를 정확히 반환하는 스크래퍼입니다. 실제보다 더 멋져 보이게 만드는 법을 배우는 중입니다 키워드를 입력하세요, 생각할 수 있는 모든 것 검색하는 내용에 주의하세요 👀 날짜별로 결과를 제어하고 표시되지 않도록 제외하세요. 이 프로그램의 검색 속도를 제어하세요 프로세싱 스레드와 4chan 스레드를 혼동하지 마세요 목차 설치 플래그 개인정보 및 데이터 저장 주의사항 이상한 것들 설...
CVE-2022-34265
CVE-2022-34265 사용법 시작 root@kitploit: docker-compose build docker-compose up -d 중지 root@kitploit: docker-compose down Django 취약점 CVE-2022-34265 PoC 검증 2022년 7월 5일미국 시간에 Django의 취약점CVE-2022-34265이 공개되었습니다. 이 글은 이 취약점에 대한 논의와 검증 결과를 설명합니다. 취약점 요약 이 취약점은 Django에서 날짜 데이터에 사용되는 Trunc 및 Extract 함수의 인자에 ...
WP Hotel Booking <= 2.3.2 - Cross-Site Scripting
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
urlhunter
root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...
CVE-2023-3519
CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 スキャナー NetScaler を検出し、HTTP ヘッダーレスポンスの最終更新日時を確認するシンプルなスキャナーです。 このプロジェクトは、mrr3b00t の PowerShell ソースコードを使用して、私が C で作成したスキャナーです。...
tapodate
tapodate https://github.com/hacefresko/CVE-2021-4045 のエクスプロイトを使用して、オフラインのTapo C200に日付やその他のコマンドを設定します。...
CVE-2022-34265
CVE-2022-34265 脆弱性の概要 この脆弱性は、Djangoで日付データに使用される関数TruncとExtractの引数において、SQLを実行する際の不適切な文字列処理に起因します。Truncのkind引数、またはExtractのlookupname引数にリクエストパラメータがそのまま指定されることで、任意のSQL文が実行されるリスクがあります。この脆弱性を悪用すると、第三者がデータベースにコマンドを送信して、許可されていないデータにアクセスしたり、データベースを削除したりする可能性があります。...
CVE-1999-0524
CVE-1999-0524 一个 Bash 脚本，用于检查系统是否存在 ICMP 时间戳请求远程日期泄露（CVE-1999-0524）漏洞。 使用方法 1. 确保 hping3 已安装并在你的 PATH 中。 2. 创建一个包含目标地址的文件，使用 IPv4 格式，每个目标占一行。 3. 赋予脚本可执行权限 4. 运行 targets.txt 示例文件 root@kitploit: cat targets.txt 127.0.0.1 127.0.1.1 10.10.10.10 运行脚本 root@kitploit: sudo ./CVE-1999-0524.sh targets.txt...
uaf-2023-28205
CVE-2023-28205: Apple WebKit 释放后使用漏洞 此漏洞可通过恶意构造的网页内容加以利用，允许攻击者执行任意代码。 描述 该代码通过延迟添加 Map 和 Date 对象，触发释放后使用（UAF）漏洞，使得垃圾回收器（GC）能够释放它们。这可能导致访问已释放的对象，从而引发内存损坏或实现漏洞利用。 参考 WebKit 提交 c9880de4a28b9a64a5e1d0513dc245d61a2e6ddb CVE-2023-28205：Google 威胁分析小组的 Clément Lecigne 以及 Amnesty International 安全实验室的...
CVE-2026-75965
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Shortcode Attribute in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping...
EUVD-2026-68972
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Shortcode Attribute in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping...
CVE-2026-75965
The User Profile Builder WordPress plugin (versions ≤ 4.0.0 ) is vulnerable to Stored Cross-Site Scripting via the 'date' Shortcode Attribute , caused by insufficient input sanitization and output escaping in the format-date shortcode. Authenticated users with contributor-level access or higher c...
WordPress User Profile Builder plugin <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Profile Builder versions = 4.0.0...
CVE-2021-30809-OOM
CVE-2021-30809 — Apple WebKit Use-After-Free 脆弱性 クラッシュ PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 概要 このリポジトリは、CVE-2021-30809（WebKit の use-after-free UAF 脆弱性）に対する最小限のクラッシュ誘発用ハーネスを含んでいます。PoC は、細工された Web...
Lotus Domino R5 and R6 WebMail - Information Disclosure
Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
