Lucene search
+L

33 matches found

Kitploit
Kitploit
added 2026/09/13 11:27 p.m.32 views

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:43 p.m.5 views

Nessus_Map

Nessus Map Nessus XML Praser Requirements Python3 Django Tested on Ubuntu 18.04 Windows 11 Pro PowerShell What it does Vulnerability based parsing Service based parsing Host bases parsing Unsupported OS parsing Generate Executive Summary of scan Export parsed .nessus files to JSON file Import JSO...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:07 p.m.76 views

domainim

DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...

5.9AI score
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.11 views

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

5.3CVSS5.7AI score0.00729EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 7:17 a.m.27 views

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:09 a.m.6 views

cfgrip

cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:42 a.m.153 views

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

5.5AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/13 12:00 a.m.14 views

PT-2026-32538

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A crafted image could result in an out of bounds heap write a memory corruption error where data is written outside the boundaries of an allocated heap memory block when writing a yaml or json...

6.2CVSS5.8AI score0.0018EPSS
SaveExploits0References173
RedhatCVE
RedhatCVE
added 2026/03/26 3:06 p.m.15 views

CVE-2026-22203

wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...

6.9CVSS5.8AI score0.00274EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/13 9:31 p.m.17 views

EUVD-2026-11748

wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...

6.9CVSS5.8AI score0.00274EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/13 7:54 p.m.11 views

CVE-2026-22203

wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...

6.9CVSS0.00274EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/13 1:18 a.m.19 views

CVE-2026-22203

wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...

6.9CVSS5.8AI score0.00274EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/13 12:00 a.m.26 views

PT-2026-25143

wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...

6.9CVSS5.8AI score0.00274EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/12/27 4:24 a.m.277 views

Exploit for Improper Verification of Cryptographic Signature in Fortinet Fortiproxy

CVEs: CVE-2025-59718 / CVE-2025-59719 Fortinet Poc Herramient...

9.8CVSS8.1AI score0.68293EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.9 views

BehaviorTree.CPP 代码问题漏洞

BehaviorTree.CPP is a library for behavior trees in C++ open-sourced by BehaviorTree. A code issue vulnerability exists in BehaviorTree.CPP version 4.7.0 and earlier, which stems from incorrect manipulation of the parameter Source of the function JsonExporter::fromJson in the file...

5.5CVSS4.4AI score0.00205EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2025/04/11 7:58 p.m.22 views

Formie has XSS vulnerability for importing forms

Impact When importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to...

5.4CVSS6.8AI score0.0023EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/04/11 7:58 p.m.52 views

GHSA-P9HH-MH5X-WVX3 Formie has XSS vulnerability for importing forms

Impact When importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to...

5.3CVSS6.7AI score0.0023EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2024/08/14 4:41 p.m.422 views

Exploit for CVE-2024-4956

CVE-2024-4956 All information is provided for informational...

7.5CVSS6.7AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2023/11/20 11:30 a.m.35 views

MemTracer - Memory Scaner

MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework Dynamic-Link...

6.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/07/06 8:15 p.m.4 views

CVE-2023-30195

In the module "Detailed Order" lgdetailedorder in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json...

7.5CVSS7AI score0.0053EPSS
SaveExploits0References2
Rows per page
Query Builder