RDWAtool

一款 Python 全能工具，用于在 Microsoft 远程桌面 Web 访问（RDWA）应用程序上提取信息、喷洒和暴力破解密码。 这款 Python 工具可以从 Microsoft 远程桌面 Web 访问（RDWA）应用程序中提取各种信息，例如远程服务器的 FQDN、内部 AD 域名（从 FQDN 解析得出）以及远程 Windows Server 版本。 使用方法 $ rdwatool -h / / \ | / / | / / / / / // / / / / | /| / / /| |/ / / / / @podalirius / , / // /| |/ |/ / / //...

GHunt

🌐 GHunt Online version : https://osint.industries 🐍 Now Python 3.13 compatible ! 😊 Description GHunt v2 is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible. Features : CLI usage and modules Python library...

SlackPirate

SlackPirate - Slack 枚举与提取工具 这是一款使用 Python 开发的工具，它利用 Slack 原生 API 在给定访问令牌的情况下，从 Slack 工作区中提取“有趣”的信息。 截至 2018 年 5 月，Slack 拥有超过 800 万用户，并且这一数字正在迅速增长——其集成和“ChatOps”的可能性是无限的，允许团队（不仅仅是开发者！）创建一些非常强大的工作流以及 Slack 机器人/应用程序交互。 与大大小小的企业一样，Slack 这类工具经常被信息安全管理/策略雷达所忽视，这最终导致敏感和机密信息出现在它们不应出现的地方，从而引发危险情况。...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden in...

TrueBooker <= 1.0.2 - SQL Injection

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

toutatis

Toutatis 👋 你好！如有任何专业咨询或合作，请通过以下邮箱联系我： [email protected] 📧 请尽量使用你的工作邮箱进行沟通。让我们保持简洁高效，全部使用英文！ Toutatis 是一款可从 Instagram 账户中提取信息的工具，例如邮箱、电话号码等。 BTC 捐赠地址：1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ 💡 前提条件 Python 3 🛠️ 安装 通过 PyPI pip install toutatis 通过 GitHub git clone...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

CVE-2026-12260

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

CVE-2026-89236: Improper Neutralization of Special Elements used in an SQL Command

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

PT-2026-104504

Name of the Vulnerable Software and Affected Versions GeoDirectory versions prior to 2.8.187 Description Insufficient escaping and a lack of numeric validation on coordinate values when saving a listing allow authenticated attackers with Subscriber-level access or higher to perform SQL Injection...

CVE-2026-12951

The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint in versions up to and including 5.0.18. This is due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-100847

AzuraCast versions prior to 0.23.8 are vulnerable to a DQL injection flaw within the sortOrder API parameter of the AbstractSearchableListAction.php file. Attackers can exploit this by injecting arbitrary DQL expressions to extract sensitive database information , including user credentials and s...

CVE-2026-100847 AzuraCast before 0.23.8 DQL Injection via sortOrder

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settin...

EUVD-2026-87841

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settin...

CVE-2026-89237

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

EUVD-2026-87527

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

PT-2026-99246

Name of the Vulnerable Software and Affected Versions Bluff Post WordPress plugin versions prior to 1.1.2 Description Insufficient sanitization and escaping of parameters used as identifiers in a SQL query allow unauthenticated attackers to append additional SQL commands. This can lead to the...

CVE-2026-62262

Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings value and then open the returned search URL. include/wsfunctions/pwg.images.ph...

CVE-2026-62262 Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`

Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings value and then open the returned search URL. include/wsfunctions/pwg.images.ph...

CVE-2026-62262: Improper Neutralization of Special Elements used in an SQL Command

Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings value and then open the returned search URL. include/wsfunctions/pwg.images.ph...