1820 matches found
Serdyuk-DO-homework-CVE-2021-41773
Serdyuk-DO-homework-CVE-2021-41773...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
nuclei-wordfence-cve
Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...
sh00t
root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...
lazyrecon
root@kitploit: / \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e...
privacybadger
Privacy Badger Privacy Badger é uma extensão de navegador que automaticamente aprende a bloquear rastreadores ocultos. Privacy Badger é feito pela principal organização sem fins lucrativos de direitos digitais EFF para impedir que empresas espionem você. Privacy Badger envia o sinal Global Privac...
GestioIP - Reflected Cross-Site Scripting
GestioIP v3.5.7 contains a reflected cross-site scripting caused by unsanitized input in the ipdojob request, letting attackers execute scripts in the victim's browser, exploit requires specific user permissions. id: CVE-2024-50857 info: name: GestioIP - Reflected Cross-Site Scripting author:...
PT-2026-81930
In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...
CVE-2025-2266
🚨 CVE-2025-2266 — Exploit del plugin WordPress 🔍 Riepilogo della vulnerabilità Il plugin Checkout Mestres do WP for WooCommerce per WordPress è affetto da una vulnerabilità di aggiornamento arbitrario delle opzioni senza autenticazione nelle versioni 8.6.5 fino a 8.7.5. La funzione vulnerabile...
CVE-2026-45119 MyBB: ACP UTF-8 Conversion CSRF
MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alter table encoding and deny service with a specially crafted URL. The do=all control flow in...
EUVD-2026-59576
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call ...
PT-2026-72406
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm file refcount leak on cached nlm do fopen failure The cached-file path in nlm lookup file reaches the found: label unconditionally, even when nlm do fopen fails. At that label result and file-f count are updated...
CVE-2026-28157
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28156
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28155
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...
CVE-2026-28158
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28158
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28158
CVE-2026-28158 concerns unauthenticated XSS in the WordPress Do Lasso plugin versions