wreckuests

Was ist das? Wreckuests ist ein Skript, mit dem du DDoS-Angriffe mit HTTP-Flood GET/POST durchführen kannst. Es ist in reinem Python geschrieben und verwendet Proxy-Server als „Bots“. NATÜRLICH ist dieses Skript nicht universell und du kannst nicht einfach die Website des Pentagons/der NSA/was au...

SCANNER-INURLBR

Neues Repository Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

DSXS

Damn Small XSS Scanner ========= Damn Small XSS Scanner DSXS è uno scanner di vulnerabilità Cross-site scripting completamente funzionale che supporta parametri GET e POST scritto in meno di 100 righe di codice. Come impostazioni opzionali supporta un proxy HTTP insieme ai valori degli header HTT...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS è uno scanner di vulnerabilità SQL injection completamente funzionante supporta parametri GET e POST scritto in meno di 100 righe di codice. Come impostazioni opzionali supporta il proxy HTTP insieme ai valori degli header HTTP User-Agent,...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner Plug-in di scansione passiva Burp Suite per rilevamento della vulnerabilità CVE-2025-55182, utilizza JDK 17 Utilizzo del plug-in: Scansione predefinita della cronologia / scansione attiva con clic destro, quando viene identificata una vulnerabilità, passa automaticament...

EUVD-2026-66132

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...

ghauri

Like Ghauri, consider supporting the developer...

s3cXSSer

s3cXSSer Questa estensione ti aiuterà a rilevare facilmente vulnerabilità XSS basate su GET/POST in qualsiasi sito web, S3C - XSSER - Estensione per Chrome Come aggiungerla a Chrome o Brave 1- Vai su brave://extensions/ o chrome://extensions/ 2- attiva la Modalità sviluppatore e clicca su Load...

CVE-2026-14195

Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...

CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...

UFONet 2.0

UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...

PT-2026-40896

Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...

CVE-2026-41271 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...

CVE-2026-2654

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...

PT-2026-3217

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the api get post summary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-leve...

PT-2025-53364

Name of the Vulnerable Software and Affected Versions Microhard Systems IPn4G version 1.1.0 Description The software contains an authentication bypass that allows authorized attackers to read, modify, or delete arbitrary files. The issue resides in the hidden system-editor.sh script. Attackers ca...

SqlScanner

SqlScanner SQL Injection Scanner deve...

CVE-2025-64048

YCCMS 3.4 contains a stored cross-site scripting XSS vulnerability in the article management functionality. The vulnerability exists in the add and getPost functions within the ArticleAction.class.php file due to improper neutralization of user input in the article title field...