27759 matches found
CVE-2025-2907
CVE-2025-2907 エクスプロイト 詳細 公開日 : 2025-04-04 更新日 : 2025-03-28 深刻度 : 緊急 CVSS スコア: 9.8 CWE : CWE-862: 認証欠如 影響を受けるバージョン : n/a から 12.3.1 までの全バージョン 研究者 : https://www.wordfence.com/threat-intel/vulnerabilities/researchers/mike-gozdiskowski CVSS ベクトル CVSS バージョン : 9.8 ベクトル文字列 :...
CVE-2023-3519
CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 Scanner A simple scanner to find netscalers and look at the las modified date on the HTTP header response this project is a scanner made by me in C using the source-code of mrr3b00t in powershell...
ssl-certificate-expiry-date-checker
sslcertificateexpirydatechecker Descubre qué certificado caducará y necesita renovarse. Obtén diversa información del resultado del escaneo fecha de caducidad, emisor, firma, número de serie... Si eres el administrador de certificados SSL en tu organización, recopila la lista de tus compañeros,...
tapodate
tapodate Uses https://github.com/hacefresko/CVE-2021-4045 exploit to set the date and other commands to an offline Tapo C200...
WP Hotel Booking <= 2.3.2 - Cross-Site Scripting
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
pepeScraper
pepeScraper - scraper de 4chan Un scraper completo para 4chan Ahora eso es rápido. pepeScraper es un scraper que utiliza contexto para tus búsquedas y devuelve exactamente lo que deseas. Estoy aprendiendo cómo hacer que un elemento se vea más cool de lo que realmente es Introduce palabras clave,...
CVE-2022-34265
CVE-2022-34265 Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookupname argument of...
CVE-2022-34265
CVE-2022-34265 Usage start root@kitploit: docker-compose build docker-compose up -d stop root@kitploit: docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion...
CVE-1999-0524
CVE-1999-0524 A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure CVE-1999-0524. How to use 1. Make sure hping3 is installed and in your PATH. 2. Create a file that contains the targets, in IPv4 format and each target on a new line. 3. Make the script...
uaf-2023-28205
CVE-2023-28205: Apple WebKit 释放后使用漏洞 此漏洞可通过恶意构造的网页内容加以利用，允许攻击者执行任意代码。 描述 该代码通过延迟添加 Map 和 Date 对象，触发释放后使用（UAF）漏洞，使得垃圾回收器（GC）能够释放它们。这可能导致访问已释放的对象，从而引发内存损坏或实现漏洞利用。 参考 WebKit 提交 c9880de4a28b9a64a5e1d0513dc245d61a2e6ddb CVE-2023-28205：Google 威胁分析小组的 Clément Lecigne 以及 Amnesty International 安全实验室的...
urlhunter
root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...
CVE-2026-75965
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Shortcode Attribute in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping...
CVE-2026-75965
The User Profile Builder WordPress plugin (versions ≤ 4.0.0 ) is vulnerable to Stored Cross-Site Scripting via the 'date' Shortcode Attribute , caused by insufficient input sanitization and output escaping in the format-date shortcode. Authenticated users with contributor-level access or higher c...
EUVD-2026-68972
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Shortcode Attribute in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping...
WordPress User Profile Builder plugin <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Profile Builder versions = 4.0.0...
CVE-2021-30809-OOM
CVE-2021-30809 — Apple WebKit Use-After-Free Vulnerability Crash PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 Overview This repository contains a minimal crash-inducing harness for CVE-2021-30809, a use-after-free UAF vulnerability in WebKit. The PoC exercis...
Lotus Domino R5 and R6 WebMail - Information Disclosure
Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
