liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

awesome-nodejs-security

精心整理的 Node.js 安全资源精选列表。 从 Liran Tal 学习 Node.js 安全编码技术和最佳实践 目录 工具 Web 框架强化 静态代码分析 动态应用安全测试 输入输出验证 安全组合 CSRF 漏洞与安全公告 安全加固 数据源 安全事件 教育资源 黑客演练场 文章 研究论文 书籍 路线图 公司 工具 Web 框架强化 Helmet - Helmet 帮助您通过设置各种 HTTP 标头来保护 Express 应用。 koa-helmet - koa-helmet 帮助您通过设置各种 HTTP 标头来保护 Koa 应用。 blankie - 用于 hapi 的 CSP...

CVE-2026-43813

CVE-2026-43813 — Bypass de enforceEnvironment en CloudAttestation Análisis de ingeniería inversa del fallo de validación de entrada de la atestación PCC que Apple distribuyó en iOS 26.6, encontrado en CloudAttestation.dylib. TL;DR PCC.ComputeNodeValidator.policy.getter lee el byte...

CVE-2018-25031

CVE-2018-25031 CVE-2018-25031 漏洞利用测试 Swagger UI 4.1.3 之前的版本可能允许远程攻击者进行欺骗攻击。通过诱使受害者打开精心构造的 URL，攻击者可以利用此漏洞显示远程 OpenAPI 定义。 HowTo 找到文档端点，并添加参数 "configUrl" 指向 test.json 或 "url" 指向 test.yaml。 https://exemple.com/?configUrl=https://raw.githubusercontent.com/mathis2001/CVE-2018-25031/main/test.json...

CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

Aviso de Seguridad: El Análisis de Tamaño de Fragmento Negativo Causa Corrupción de Memoria en facil.io ID de CVE asignado : CVE-2026-66731 Producto: facil.io Versiones afectadas: facil.io = 0.7.5 0.7.5, 0.7.6, master; introducido cuando el parser HTTP/1.1 de 0.8.x se retroportó en 0.7.5 - no...

ColdFusionPwn

ColdFusionPwn 针对 Adobe ColdFusion 11/12 的 CVE-2017-3066 利用工具。 描述 该工具允许您生成序列化的 AMF 载荷，以利用对允许类的输入验证缺失漏洞。 详情请参阅我们的博客文章。 安装 获取最新版本的 ysoserial。 从发布页面获取 ColdFusionPwn。 用法 java -cp ColdFusionPwn-0.0.1-SNAPSHOT-all.jar:ysoserial-master-SNAPSHOT.jar com.codewhitesec.coldfusionpwn.ColdFusionPwner -s|-e...

CVE-2021-21985_PoC

CVE-2021-21985 漏洞代码 可用的CLASS/METHOD，用于PoC的简单示例：com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported getIsLocalDataProtectionSupportedOnVc...

CVE-2024-51032

CVE-2024-51032 Descripción Una vulnerabilidad de Cross-site Scripting XSS en managerecipient.php de Sourcecodester Toll Tax Management System 1.0 permite a usuarios autenticados remotos inyectar scripts web arbitrarios a través del campo de entrada 'owner'. Tipo de Vulnerabilidad Cross Site...

CVE-2025-22964

CVE-2025-22964: Inyección SQL ciega basada en tiempo en DDSN Interactive cm3 Acora CMS versión 10.1.1 DDSN Interactive cm3 Acora CMS versión 10.1.1 tiene una vulnerabilidad de inyección SQL ciega basada en tiempo causada por una sanitización y validación insuficientes de la entrada en el parámetr...

CVE-2024-9264-RCE-Exploit

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions 描述 Grafana中远程代码执行（CVE-2024-9264）的概念验证 该仓库包含一个Python脚本，用于利用Grafana的SQL Expressions功能中的远程代码执行（RCE）漏洞。通过利用输入清理不足，该漏洞利用允许攻击者在服务器上执行任意shell命令。这是通过shellfs社区扩展实现的，攻击者可以安装并加载该扩展以协助命令执行。 前置条件 已验证的具有Viewer或更高权限的Grafana用户...

CVE-2026-24061

CVE-2026-24061 Exploit de RCE en Telnet - Por SafeBreach Labs Este script explota la vulnerabilidad CVE-2026-24061 en servidores Telnet mediante una variable de entorno USER malformada. Uso Ejecute el script con un host de destino: python telnetrce.py -p Argumentos host: Dirección IP o nombre de...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

osTicket < 1.12.1 - Cross-Site Scripting

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the...

Nevma Adaptive Images - Arbitrary File Deletion

Nevma Adaptive Images plugin before 0.6.67 for WordPress contains an arbitrary file deletion caused by unsanitized input in adaptive-images-script.php, letting remote attackers delete arbitrary files, exploit requires sending specific request parameters. id: CVE-2019-14206 info: name: Nevma...

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

Roxy-WI - Remote Code Execution

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the delcert parameter without proper input validation in the /app/options.py file, allowing attackers to inject arbitrary OS commands. id: CVE-2022-31161 info: name: Roxy-WI - Remote Code...

XWiki - Open Redirect

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as //mydomain.com i.e. omitting the http:. It was also possible to bypass it when using URL...

Membership Database <= 1.0 - Cross-Site Scripting

Membership Database before 1.0 is susceptible to cross-site scripting via the tab parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker t...

XWiki >= 13.10.8 - Cross-Site Scripting

Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript. id: CVE-2023-29506 info: name: XWiki = 13.10.8 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Reflected XSS vulnerability in XWiki authenticate endpoints allows...