Bulk_CVE-1999-0532_Scanner

BulkCVE-1999-0532Scanner hackerone.com과 함께 바운티 해킹 목적으로 사용하기 위해 제가 만든 도구입니다. Python 버전 v2.7.x 실행: ./CVE-1999-0532.py...

CVE-2021-22880

CVE-2021-22880 Utilisation Création du rails-server et du PoC. Voir hackerOne...

Needle

Needle Extension Chrome pour un accès instantané à votre tableau de bord de soumission de bogues sur diverses plateformes + rapports divulgués publiquement + bugbountytip Needle est la seule extension Chrome dont vous aurez besoin pour accéder en un clic à vos soumissions de bogues sur différente...

rengine

reNgine : Le Scanner de Reconnaissance Web et de Vulnérabilités Ultime 🚀 reNgine 2.2.0 est sorti ! reNgine 2.2.0 est livré avec bounty hub où vous pouvez synchroniser et importer vos programmes hackerone, des notifications dans...

hackerone-reports

ライブサイト: reddelexc.github.io/hackerone-reports HackerOne レポートのトップ。すべてのレポートの生データは data.csv に保存されています。 このファイルを更新するスクリプトは Python 3 で書かれており、chromedriver と Chromium の実行ファイルが PATH に必要です。 各スクリプトには動作に関する説明が含まれています。 スクリプトの実行順序: 1. fetcher.py 2. uniquer.py 3. filler.py 4. rater.py トップ100. トップ100 アップボートされたレポ...

DarkAngel

English | 中文 DarkAngel — это полностью автоматический сканер уязвимостей для белых хакеров, который позволяет отслеживать активы HackerOne и Bugcrowd, генерировать отчёты об уязвимостях, делать скриншоты URL-адресов уязвимостей и отправлять уведомления через мессенджеры. Адрес загрузки DarkAngel:...

hackerone

hackerone Я собрал все раскрытые отчеты hackerone, перебирая их API https://api.hackerone.com/v1/hackers/reports/id от номера 1 до 1500000. Возможно, есть и другие отчеты, чей идентификатор больше 1500000. Файл reports.csv содержит более 10000 раскрытых отчетов; каждая строка содержит reportid,...

Flyte Console <0.52.0 - Server-Side Request Forgery

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or...

perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery SSRF attacks. id: CVE-2022-41412 info: name: perfSONAR 4.x = 4.4.4 - Server-Side Request Forgery author: nullhypothesis severity: high descriptio...

Redash Setup Configuration - Default Secrets Disclosure

Redash Setup Configuration is vulnerable to default secrets disclosure Insecure Default Initialization of Resource. If an admin sets up Redash versions =10.0 and prior without explicitly specifying the REDASHCOOKIESECRET or REDASHSECRETKEY environment variables, a default value is used for both...

Ruby on Rails Web Console - Remote Code Execution

Ruby on Rails Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelistedips protection mechanism via a crafted request to request.rb...

DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery

DotNetNuke aka DNN before 9.2.0 suffers from a server-side request forgery vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources. id: CVE-2017-0929 info: name: DotNetNuke DNN ImageHandler 9.2.0 - Server-Side Request Forgery author...

AvantFAX 3.3.3 - Cross-Site Scripting

AvantFAX 3.3.3 contains a cross-site scripting vulnerability via an arbitrary parameter name submitted to the default URL, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1. id: CVE-2017-18024 info: name: AvantFAX 3.3.3 - Cross-Site Scripting author: pikpikc...

Rocket.Chat - Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. id: CVE-2024-39713 info: name: Rocket.Chat - Server-Side Request Forgery SSRF author: iamnoooob,rootxharsh,pdresearch severity: high description: | A Server-Side Request Forgery SSRF affects...

GitLab - Account Takeover via Password Reset

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...

PAN-OS - Reflected Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link.The...

Revive Adserver 5.4.1 - Cross-Site Scripting

A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions. id: CVE-2023-38040 info: name: Revive Adserver 5.4.1 - Cross-Site Scripting author: ritikchaddha severity: medium description: | A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions...

Ruby on Rails <5.0.1 - Remote Code Execution

Ruby on Rails before version 5.0.1 is susceptible to remote code execution because it passes user parameters as local variables into partials. id: CVE-2020-8163 info: name: Ruby on Rails 5.0.1 - Remote Code Execution author: timkoopmans severity: high description: Ruby on Rails before version 5.0...

Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure

GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2020-26413 info:...

Grafana <= 6.7.1 - Cross-Site Scripting

Grafana through 6.7.1 contains an unauthenticated stored cross-site scripting vulnerability due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot...