33 matches found
domainim
DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...
Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...
Nessus_Map
Nessus Map Nessus XML 解析器 环境要求 Python3 Django 测试平台 Ubuntu 18.04 Windows 11 Pro PowerShell 功能 基于漏洞的解析 基于服务的解析 基于主机的解析 不支持的操作系统解析 生成扫描的执行摘要 将解析后的 .nessus 文件导出为 JSON 文件 在 NessusMap 中导入 JSON 文件 合并多次 Nessus 扫描结果 工作原理 从 Nessus 扫描结果中获取 .nessus 文件 解析 XML 数据 为所有漏洞生成易于阅读的输出 安装步骤 克隆此仓库...
ipsourcebypass
This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses...
cfgrip
cfgrip PE/ELF x86/x64 CFG 提取器。输入一个二进制文件，反汇编它，解析每个跳转和调用（GOT、跳转表、寄存器追踪），并将完整的控制流图导出为结构化 JSON。 为什么 你需要确切知道每个分支的去向——不是为了阅读，而是为了打补丁。将 JSON 输入 Zydis 或 AsmJit，定位你需要挂钩或修改的确切指令，然后写回。反作弊团队用它来映射游戏二进制文件；逆向人员用它来将代码提取到自己的分析管线中；软件分析师在不运行二进制文件的情况下追踪执行路径。 cfgrip 提供地图。怎么用取决于你。 它提取什么 对于每个 cfgrip 处理的二进制文件，它会生成： 函数列表...
steamer
Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...
usbrip
usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...
PT-2026-32538
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A crafted image could result in an out of bounds heap write a memory corruption error where data is written outside the boundaries of an allocated heap memory block when writing a yaml or json...
CVE-2026-22203
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
EUVD-2026-11748
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
CVE-2026-22203
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
CVE-2026-22203
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
PT-2026-25143
wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret...
Exploit for Improper Verification of Cryptographic Signature in Fortinet Fortiproxy
CVEs: CVE-2025-59718 / CVE-2025-59719 Fortinet Poc Herramient...
BehaviorTree.CPP 代码问题漏洞
BehaviorTree.CPP is a library for behavior trees in C++ open-sourced by BehaviorTree. A code issue vulnerability exists in BehaviorTree.CPP version 4.7.0 and earlier, which stems from incorrect manipulation of the parameter Source of the function JsonExporter::fromJson in the file...
Formie has XSS vulnerability for importing forms
Impact When importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to...
GHSA-P9HH-MH5X-WVX3 Formie has XSS vulnerability for importing forms
Impact When importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to...
Exploit for CVE-2024-4956
CVE-2024-4956 All information is provided for informational...
MemTracer - Memory Scaner
MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework Dynamic-Link...