awesome-oneliner-bugbounty

Awesome 원라이너 버그 바운티 버그 바운티를 위한 멋진 원라이너 스크립트 모음입니다. 이 저장소는 제가 제공하고 커뮤니티가 기여한 다양한 버그 바운티 팁용 원라이너를 보관하고 있습니다. 여러분의 기여와 제안을 진심으로 환영합니다♥. 정의 이 섹션에서는 원라이너 명령/스크립트 전체에서 사용되는 특정 용어 또는 자리표시자를 정의합니다. 1.1. "HOST "는 하나의 호스트 이름, 하위도메인 또는 IP 주소를 정의합니다. 예를 들어 internal.host, domain.tld, sub.domain.tld 또는...

One-Liner-Collections

원라이너 컬렉션 이 저장소에는 설명 및 설치 요구 사항과 함께 원라이너 목록이 포함되어 있습니다. ──────────────────────────────────────────────────────────────────────── SQL 인젝션 설치 요구 사항 1. Subfinder : https://github.com/projectdiscovery/subfinder 2. GAU : https://github.com/lc/gau 3. GF : https://github.com/tomnomnom/gf 4. Findomain :...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 및 CVE-2023-2640 : 권한 상승 CVE-2023-32629 및 CVE-2023-2640을 사용하는 Ubuntu 권한 상승 bash 원라이너. 완전히 훔쳐온 것: https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 원본 출처를 리트윗해 주세요 이 스크립트를 제 Github에 보관하고 쉽게 공유하고 싶었을 뿐입니다...

Powshell-decode-payload

PowerShell gzip 코드 디코딩 sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd sal a New-Object;a IO.StreamReadera...

CVE-2025-51869

CVE-2025-51869 脆弱性の説明 Liner は、世界中で1000万人以上のユーザーを持つ信頼性の高いAI検索エンジンです。Liner は LLM ベースの検索エンジンを構築しており、そのチャットコンポーネントに安全でないダイレクトオブジェクト参照 IDOR の脆弱性が存在します。攻撃者はこの IDOR を悪用して、他のユーザーの会話を改ざんすることができます。 攻撃ベクトル すべてのユーザーの会話履歴はサーバーに保存されています。しかし、Liner のサーバーは個々の会話履歴の所有権や共有状態を区別しません。その結果、攻撃者は会話メッセージ ID...

MAL-2026-16237 Malicious code in strapi-plugin-persh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ce68eeb9a309b5fff512e24a1b8f4c12fb171c0752d6a04293a4e72c805088 [email protected] ships a postinstall.js also declared as the package main that runs automatically on npm install. The script spawns a...

CVE-2026-28279

osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the osctrl-admin environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when creating or editing environments. These...

📄 Metasploit Web Delivery PHP Proof of Concept

This project presents an advanced proof of concept that emulates the behavior of Metasploit's multi/script/webdelivery module using PHP. The goal is to demonstrate how script-based payload delivery works in a modular and extensible way, without relying directly on Metasploit. The script launches ...

EUVD-2025-22142

Malicious code in bioql PyPI...

Malicious code in test-mlw2-liner-seamy (npm)

The package test-mlw2-liner-seamy was found to contain malicious code...

MAL-2025-35692 Malicious code in test-mlw2-liner-seamy (npm)

The package test-mlw2-liner-seamy was found to contain malicious code...

awesome-oneliner-bugbounty

This repository is an offensive tool for bug bounty hunting. It contains a collection of one-liner scripts for identifying vulnerabilities, particularly for bug bounty tips. The primary CVE ID present in the context is not explicitly mentioned, but the repository includes scripts for Local File...

CVE-2025-51869

Insecure Direct Object Reference IDOR vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted spaceid, threadid, and messageid parameters to the v1/space/spaceid/thread/threadid/message/messageid endpoint...

CVE-2025-51869

Insecure Direct Object Reference IDOR vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted spaceid, threadid, and messageid parameters to the v1/space/spaceid/thread/threadid/message/messageid endpoint...

CVE-2025-51869

Insecure Direct Object Reference IDOR vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted spaceid, threadid, and messageid parameters to the v1/space/spaceid/thread/threadid/message/messageid endpoint...

Liner 安全漏洞

Liner is an AI large language modeling platform from Liner. A security vulnerability exists in Liner version 2025-06-03 and earlier, which stems from improper access control of the spaceid, threadid, and messageid parameters, which could lead to the disclosure of sensitive information...

PT-2025-30335 · Liner · Liner

Name of the Vulnerable Software and Affected Versions: Liner versions through 2025-06-03 Description: An Insecure Direct Object Reference IDOR vulnerability exists that allows attackers to gain sensitive information. The vulnerability is exploitable through crafted space id, thread id, and messag...

CVE-2025-51869

Insecure Direct Object Reference IDOR vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted spaceid, threadid, and messageid parameters to the v1/space/spaceid/thread/threadid/message/messageid endpoint...

CVE-2025-51869: Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference IDOR vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted spaceid, threadid, and messageid parameters to the v1/space/spaceid/thread/threadid/message/messageid endpoint...

CVE-2025-51869

The AI search engine Liner is vulnerable to an Insecure Direct Object Reference (IDOR) in its chat component, affecting versions through 2025-06-03 . The root cause is the server's failure to validate ownership or sharing status for conversation histories; it only verifies the message_id when a u...