JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

Edito CMS - Sensitive Data Leak

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...

Osclass Security Advisory 3.4.1 - Local File Inclusion

A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. id: CVE-2014-6308 info: name: Osclass Security Advisory 3.4.1 - Local File Inclusion author: daffainfo...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

WordPress Plugin WP Content Source Control - Directory Traversal

A directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. id: CVE-2014-5368 inf...

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

phpShowtime 2.0 - Directory Traversal

A directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. id: CVE-2012-0981 info: name: phpShowtime 2.0 - Directory Traversal author: daffainfo severity: medium description: A...

11in1 CMS 1.2.1 - Local File Inclusion (LFI)

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. id: CVE-2012-0996 info: name: 11in1 CMS 1.2.1 - Local File Inclusion LFI author: daffainfo...

FlatnuX CMS - Directory Traversal

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. id: CVE-2012-4878 info: name: FlatnuX CMS - Directory Traversal author: daffainfo severity:...

arya

Arya - 反向YARA Arya是一种独特的工具，用于生成旨在触发YARA规则的伪恶意文件。你可以把它想象成一个反向YARA，因为它恰恰做了相反的事情——它创建与你的规则匹配的文件。 你可以在我们的博客中阅读更多关于Arya及其工作原理的信息。 简介 YARA规则是安全研究人员识别和分类恶意软件样本的重要工具。它们通过描述恶意软件代码中的模式和字符串来帮助分析师识别已知或新的威胁。YARA规则也经常集成到商业检测工具中，或内部用于检测企业网络中的异常二进制文件。...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

osv.dev

文档 完整文档请参见此处。 API 文档请参见此处。 数据导出 我们提供了 GCS 存储桶 gs://osv-vulnerabilities 的数据导出。更多信息请查看我们的文档。 查看 Web UI OSV 的 Web UI 实例部署在 https://osv.dev。 使用扫描器 我们提供了一个基于 Go 的工具，可以扫描您的依赖项，并通过 OSV API 与 OSV 数据库进行比对，以发现已知漏洞。 目前它可以扫描各种锁文件、Debian Docker 容器、SPDX 和 CycloneDB SBOM 以及 Git 仓库。 扫描器位于其自己的仓库中。 本仓库 本仓库包含在 GCP...

troll-a

Troll-A Troll-A 是一个命令行工具，用于从 WARC（Web ARChive）文件中提取密码、API 密钥和令牌等机密信息。Troll-A 是一个易用 、全面 且快速 的解决方案，用于在网络存档中查找机密信息。 特性 协议： 支持通过 HTTP/HTTPS 从网络服务器、Amazon S3 对象存储服务、本地文件系统或 STDIN 直接获取网络存档。 压缩： 支持使用 GZip、BZip2、XZ 或 ZStd 压缩的网络存档。对于 ZStd，还支持在压缩数据流前附加自定义字典（如同 .megawarc.warc.zst 文件中使用的）。 全面： 使用来自 Gitleaks...

mboxshell

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Prueba de concepto de la vulnerabilidad de exfiltración de archivos de Libreoffice en Big Blue Button Estos archivos ODT muestran cómo explotar una vulnerabilidad de exfiltración de archivos que puede ocurrir con el renderizado de Libreoffice del lado del...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

web_exploit_detector

Web Exploit Detector Introducción Web Exploit Detector es una aplicación Node.js y un módulo NPM utilizada para detectar posibles infecciones, código malicioso y archivos sospechosos en entornos de alojamiento web. Esta aplicación está pensada para ejecutarse en servidores web que alojen uno o má...

SecretFinder

关于 SecretFinder SecretFinder 是一个基于 LinkFinder 的 Python 脚本，用于发现 JavaScript 文件中的敏感数据，如 apikeys、accesstoken、authorizations、jwt 等。它通过使用 jsbeautifier for Python 结合一个相当大的正则表达式来实现。这个正则表达式由四个小的正则表达式组成。它们负责在 JS 文件中查找和搜索任何内容。 输出以 HTML 或纯文本形式呈现。 帮助 root@kitploit: usage: SecretFinder.py -h -e -i INPUT -o...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ SOLO CON FINES EDUCATIVOS Y DE INVESTIGACIÓN ⚠️ 🌐 Idioma / Dil 🇪🇸 Español 🇹🇷 Türkçe Español 📋 Tabla de contenidos Descripción general Características Requisitos Instalación Uso Detalles técnicos Capturas de pantalla Aviso legal Contribuciones 🎯 Descripción...