CVE-2021-43798

CVE-2021-43798 Grafana 8.x Arbitrary File Read http://ryze-t.com/posts/2021/12/15/CVE-2021-43798-Grafana%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.html Usage exp http://example.com /etc/passwd Results...

CVE-2024-57430

CVE-2024-57430 An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

sniffly

Sniffly2 Sniffly2 هي متغير من Sniffly الذي يساء استخدام رؤوس HTTP Strict Transport Security وواجهة Performance Timing API من أجل استنشاق تاريخ التصفح الخاص بك في متصفحات تعتمد على كروميوم. عرض توضيحي قم بزيارة http://diracdeltas.github.io/sniffly في Chrome/Chromium/Brave/إلخ. مع تعطيل HTTPS...

-CVE-2017-9805-

Vulnerability information Resources: https://vulners.com/cve/CVE-2017-9805 What is this? A python exploit script capable of executing remote commands into the shell of a system hosting a Struts2 vulnerable to S2-052. Usage python s2-052.py --target 'http://192.168.0.233/orders/3' --command "echo...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

CVE-2023-21839-metasploit-scanner

CVE-2023-21839-metasploit-scanner Usage git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner cd CVE-2023-21839-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp weblogiciioprce.py /.msf4/modules/auxiliary/scanner/http chmod +x...

CVE-2022-46169-Cacti-1.2.22

CVE-2022-46169 This exploit is a modified version from the original script by @FredBrave and adapted by @arthurcortesr and @alv-david. Usage/Examples root@kitploit: python3 CVE-2022-46169.py -u http://XX.XX.XX.XX --LHOST XX.XX.XX.XX --LPORT XXXX --host-id X --local-id X Expected results...

patch-checker

PatchChecker هذا هو قاعدة الكود للخدمة التي تعمل على: https://patchchecker.com. باختصار، PatchChecker هو تطبيق ويب يعمل على Flask يوفر مخرجات مشابهة لتلك التي يقدمها Watson. ومع ذلك، باستخدام PatchChecker، لا يلزم تنفيذ ملف ثنائي على الجهاز الهدف. يتضمن هذا المشروع أيضًا أداة كشط ويب تقوم تلقائيً...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

CVE-2021-26086

CVE-2021-26084 एक OGNL इंजेक्शन भेद्यता मौजूद है जो एक प्रमाणित उपयोगकर्ता और कुछ उदाहरणों में अप्रमाणित उपयोगकर्ता को Confluence सर्वर या डेटा सेंटर इंस्टेंस पर मनमाना कोड निष्पादित करने की अनुमति देगी। QueryString param request: उपयोग: $ python3 CVE-2021-26084Confluence.py -u http://website.com...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile Authentication Bypass Progress ShareFile Authentication Bypass Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if Progress ShareFile instance is vulnerable to CVE-2026-2699 authentication bypass. Detection Artifact Generato...

xpfarm

XPFarm An open-source vulnerability scanner that wraps well-known open-source security tools behind a single web UI. Index Section| Description ---|--- Why| Motivation and philosophy behind XPFarm Wrapped Tools| The 10 open-source tools orchestrated by XPFarm Architecture Map| Full system...

CVE-2025-1974

Kubernetes Ingress-NGINX Unauthenticated Remote Code Execution CVE-2025-1974 Ingress-NGINX: An ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer The "IngressNightmare" vulnerability CVE-2025-1974 stems from a critical flaw in the Ingress-NGINX Admission Controller...

CVE-2024-21006

1、Nothing much to say, it's just an LDAP exploitation. 2、Please check the LDAP service request log. 3、The target version needs Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0. And a low-version JDK is required. 4、Use JNDIExploit-1.4-SNAPSHOT.jar to start the LDAP service...

WhisperPair

WhisperPair: Testing Harness for Google Fast Pair -green A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pa...

ubertooth

Ubertooth Project Ubertooth is an open source wireless development platform suitable for Bluetooth experimentation. Ubertooth ships with a capable BLE Bluetooth Smart sniffer and can sniff some data from Basic Rate BR Bluetooth Classic connections. The latest release is 2020-12-R1. The latest...

CVE-2023-3519

CVE-2023-3519 This Nuclei template checks for the presence of the CVE-2023-3519 vulnerability in a target web server. Vulnerability CVE-2023-3519 is a vulnerability that allows unauthenticated remote code execution in the Citrix Application Delivery Controller ADC and Gateway appliances. An...

morty

Morty एक सेवा के रूप में वेब सामग्री स्वच्छीकरण प्रॉक्सी Morty वेब पेजों को पुनर्लेखित करता है ताकि दुर्भावनापूर्ण HTML टैग और विशेषताओं को बाहर रखा जा सके। यह तीसरे पक्ष के सूचना लीक को रोकने के लिए बाहरी संसाधन संदर्भों को भी बदलता है। Morty का मुख्य उद्देश्य searx के लिए परिणाम प्रॉक्सी प्रदान...

morty

Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...