63 matches found
ghauri
Like Ghauri, consider supporting the developer...
DSXS
Damn Small XSS Scanner Damn Small XSS Scanner DSXS es un escáner de vulnerabilidades de Cross-site scripting completamente funcional compatible con parámetros GET y POST escrito en menos de 100 líneas de código. En cuanto a configuraciones opcionales, admite proxy HTTP junto con los valores de...
CVE-2025-55182-burpscanner
CVE-2025-55182-burpscanner Plugin de escaneo pasivo de burpsuite basado en la detección de la vulnerabilidad CVE-2025-55182, usando JDK 17 Uso del plugin: Escaneo predeterminado del historial / escaneo activo con clic derecho, al detectar una vulnerabilidad se dirige automáticamente al módulo...
DSSS
Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS es un escáner de vulnerabilidades de inyección SQL completamente funcional que soporta parámetros GET y POST escrito en menos de 100 líneas de código. En cuanto a las configuraciones opcionales, soporta proxy HTTP junto con los valores de...
SCANNER-INURLBR
New repository Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. https://github.com/MrCl0wnLab/SCANNER-INURLBR...
wreckuests
¿Qué es esto? Wreckuests es un script que te permite ejecutar ataques DDoS con inundación HTTP GET/POST. Está escrito en Python puro y utiliza servidores proxy como "bots". POR SUPUESTO, este script no es universal y no puedes simplemente tumbar el sitio web del Pentágono/NSA/lo que sea con un so...
s3cXSSer
s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...
doser.go
doser.go DoS tool for HTTP requests inspired by hulk but has more functionalities written in Go: How to use? 1. Compile it root@kitploit: go build doser.go 2. Use it For example: 999 threads sends GET requests. P.S: Do not really attack my website pls root@kitploit: ./doser -t 999 -g...
EUVD-2026-66132
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...
CVE-2026-14195
Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...
CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...
UFONet 2.0
UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...
PT-2026-40896
Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...
CVE-2026-41271 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...
CVE-2026-2654
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure
The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...
PT-2026-3217
The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the api get post summary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-leve...
PT-2025-53364
Name of the Vulnerable Software and Affected Versions Microhard Systems IPn4G version 1.1.0 Description The software contains an authentication bypass that allows authorized attackers to read, modify, or delete arbitrary files. The issue resides in the hidden system-editor.sh script. Attackers ca...
