WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional Map In Your Language plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such ...

WP Go Maps <= 9.0.29 - Cross-Site Scripting

WP Go Maps formerly WP Google Maps plugin for WordPress versions before 9.0.30 is vulnerable to Reflected Cross-Site Scripting via the 'mapid' parameter in the admin map edit page. id: CVE-2024-29931 info: name: WP Go Maps = 9.0.29 - Cross-Site Scripting author: Shivam Kamboj severity: medium...

Google ADK-Python - Unauthenticated Builder Endpoint

Google Agent Development Kit ADK 1.7.0 through 1.28.1 and 2.0.0a1 through 2.0.0a2 on Python OSS, Cloud Run, and GKE contains a code injection and missing authentication vulnerability, letting unauthenticated remote attackers execute arbitrary code on the server, exploit requires no authentication...

Integrate Google Drive <= 1.5.3 - Information Disclosure

File Manager for Google Drive - Integrate Google Drive with WordPress plugin for WordPress = 1.5.3 contains sensitive information exposure caused by improper protection of the getlocalizedata function, letting unauthenticated attackers extract Google OAuth credentials and account email addresses,...

WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection id: CVE-2023-0037 info: name: WordPress 10Web Map...

Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. id: CVE-2017-18556 info: name: Google Analytics by BestWebSoft 1.7.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-google-analytics plugin before 1.7.1 for WordPress has...

WP Google Maps < 7.10.43 - Cross-Site Scripting

The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO. id: CVE-2019-9912 info: name: WP Google Maps 7.10.43 - Cross-Site Scripting author: ritikchaddha severity: medium description: | The wp-google-maps plugin before 7.10.43 for WordPress has XSS via t...

Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints

The Integrate Google Drive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 1.1.99. This makes it possible for unauthenticated attackers to perform a wide variety of operations, such as movi...

WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting

WordPress AB Google Map Travel plugin through 3.4 contains multiple stored cross-site scripting vulnerabilities. The plugin allows an attacker to hijack the administrator authentication for requests via the 1 lat Latitude, 2 long Longitude, 3 mapwidth, 4 mapheight, or 5 zoom Map Zoom parameters i...

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...

GATOR

KIT DE ATAQUE A GCP PARA INVESTIGACIÓN OFENSIVA GATOR - GCP Attack Toolkit for Offensive Research , una herramienta diseñada para ayudar en la investigación y explotación de entornos de Google Cloud. Ofrece una amplia gama de módulos adaptados para apoyar a los usuarios en diversas etapas de...

GCPBucketBrute

GCPBucketBrute Un script para enumerar buckets de Google Storage, determinar qué acceso tienes a ellos y determinar si se pueden escalar privilegios. Este script acepta opcionalmente credenciales de cuenta de usuario/servicio de GCP y una palabra clave. Luego, se generará una lista de permutacion...

BigBountyRecon

BigBountyRecon La herramienta BigBountyRecon utiliza 58 técnicas diferentes mediante varios dorks de Google y herramientas de código abierto para acelerar el proceso de reconocimiento inicial sobre la organización objetivo. El reconocimiento es el paso más importante en cualquier prueba de...

external_v8_AOSP10_r33_CVE-2021-0396

Motor JavaScript V8 V8 es el motor JavaScript de código abierto de Google. V8 implementa ECMAScript según lo especificado en ECMA-262. V8 está escrito en C++ y se utiliza en Google Chrome, el navegador de código abierto de Google. V8 puede ejecutarse de forma independiente o integrarse en cualqui...

SCANNER-INURLBR

Descripción Búsqueda avanzada en motores de búsqueda, permite el análisis proporcionado para explotar GET / POST capturando correos electrónicos y urls, con una unión de validación personalizada interna para cada objetivo / url encontrada. Una herramienta PHP que puede ejecutarse en diferentes...

Google-Dorker

nDorker Automatiza el Dorking más rápido y mejor que nunca. ¿Qué puede hacer? 1. Google Dorking 2. Vendor Dorking 3. Github Dorking 4. Shodan Dorking Obtener nDorker git clone https://github.com/nerrorsec/nDorker cd nDorker Uso python3 nDorker.py -d example.com ¿Encontraste un error? Siéntete lib...

thedorkbox

thedorkbox TheDorkbox Colección completa de Google Dorks y técnicas OSINT para encontrar datos confidenciales Bienvenido a thedorkbox 👋 Esta es una herramienta OSINT que consiste en varios Google dorks incrustados en una plantilla HTML para que usuarios no técnicos comprendan la importancia de la...

Pixel_GPU_Exploit

Mali GPU Kernel LPE Este artículo proporciona un análisis en profundidad de dos vulnerabilidades del kernel en la GPU Mali, alcanzables desde el sandbox de aplicaciones predeterminado, que identifiqué y reporté de forma independiente a Google. Incluye un exploit del kernel que logra capacidades...

CVE-2026-11645

CVE-2026-11645 - V8 en Google Chrome anterior a Ejecución Remota de Código Uso Rápido python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notas de Explotación Gravedad: ALTA CVSS: 8.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2026-06-09 Resumen...

dorkbot

dorkbot Google 또는 다른 검색 결과에서 취약점을 스캔합니다. dorkbot은 Google 검색 쿼리 또는 기타 지원되는 소스에서 반환된 웹페이지 집합에 대해 취약점 스캔을 수행하는 모듈식 명령줄 도구입니다. 두 가지 모듈 집합으로 구성됩니다. 인덱서 - 타겟 목록을 반환하는 모듈 스캐너 - 각 타겟에 대해 취약점 스캔을 수행하는 모듈 타겟은 인덱싱되면 데이터베이스에 저장됩니다. 스캔이 완료되면 발견된 취약점을 포함한 표준 JSON 보고서가 생성됩니다. 인덱싱 및 스캔 프로세스는 별도로 실행하거나 단일 명령으로...