DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS 是一个功能完整的 SQL 注入 漏洞扫描器（支持 GET 和 POST 参数），其代码行数不到 100 行。 可选设置方面，它支持 HTTP 代理以及 HTTP 头值 User-Agent、Referer 和 Cookie。 运行示例 $ python3 dsss.py -h Damn Small SQLi Scanner DSSS 100 LoC Lines of Code v0.3a by: Miroslav Stampar @stamparm Usage: dsss.py...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner （DSXS）是一款功能完整的跨站脚本漏洞扫描器（支持 GET 和 POST 参数），代码行数不到 100 行。 在可选设置方面，它支持 HTTP 代理以及 HTTP 头部字段 User-Agent、Referer 和 Cookie。 示例运行 $ python3 dsxs.py -h Damn Small XSS Scanner DSXS 100 LoC Lines of Code v0.3a by: Miroslav Stampar @stamparm Usage: dsxs.py option...

CVE-2021-24629: Improper Neutralization of Special Elements used in an SQL Command

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

Post Content XMLRPC <= 1.0 - Admin+ SQL Injections

The plugin does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections PoC https://example.com/wp-admin/admin.php?page=pcxaddsites=add=1%20AND%20SELECT%207953%20FROM%20SELECTSLEEP5AgUn...

CVE-2019-18931

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...

CVE-2019-18931

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...

CVE-2019-18931: Buffer Copy without Checking Size of Input

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...