TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi is a windows CLI app that lets you collect data from social media and convert it into a CSV data set that can be used with Gephi. Currently it supports Twitter Reddit Youtube WWW domains / URLs More social media platforms and more features for the platforms...

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant = 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-34885 info: name: WordPress Media Library Assistant = 3.34 -...

Import Legacy Media <= 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4535 info: name: Import Legacy Media = 0.1 - Cross-Site...

WordPress Sell Media 2.4.1 - Cross-Site Scripting

WordPress Plugin Sell Media v2.4.1 contains a cross-site scripting vulnerability in /inc/class-search.php that allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field. id: CVE-2019-6112 info: name: WordPress Sell Media 2.4.1 -...

External Media without Import <=1.1.2 - Authenticated Blind Server-Side Request Forgery

WordPress External Media without Import plugin through 1.1.2 is susceptible to authenticated blind server-side request forgery. The plugin has no authorization and does not ensure that media added via URLs are external media, which can allow any authenticated users, including subscribers, to obta...

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. id: CVE-2012-4273 info: name: 2 Click Socialmedia Buttons 0.34 - Cross-Site Scripti...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion

Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. id: CVE-2020-11732 info: name: Media Library Assistant 2.82 -...

WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload

The Frontend File Manager plugin 4.0 and N-Media Post Front-end Form plugin 1.1 for WordPress were vulnerable to arbitrary file uploads due to missing file type validation. This allowed unauthenticated attackers to upload arbitrary files and potentially achieve remote code execution. id:...

CVE-2017-16567

CVE-2017-16567 1. Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

DLL_Injection_On_VLC

DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...

CVE-2021-33959

CVE-2021-33959 It can be seen that Plex service listens to the four udp ports 32410, 32412, 32413 and 32414. Through the analysis of the attack payload and using the message format of the device query request for reference, we write software to send udp packets with the attack payload of M-SEARCH...

CVE-2021-29447-POC

CVE-2021-29447-POC About This script automates the required steps to exploit CVE-2021-29447 in the media upload funnctionality in Wordpress and use it to extract files vi an XXE. Usage root@kitploit: ./generatepayloads.py --help usage: generatepayloads.py -h --local-ip LOCALIP --local-port...

poastal

Poastal - 电子邮件 OSINT 工具 Poastal 是一个电子邮件 OSINT 工具，能提供任何电子邮件地址的有价值信息。使用 Poastal，您可以轻松输入一个电子邮件地址，它会迅速回答几个问题，为您提供关键信息。 ✨ 功能特性 确定拥有该电子邮件的人员姓名。 检查电子邮件是否可投递。 查明电子邮件是否为临时邮箱。 识别该电子邮件是否被视为垃圾邮件。 检查该电子邮件是否在热门平台（如 Facebook、Twitter、Snapchat、Parler、Rumble、MeWe、Imgur、Adobe、Wordpress 和 Duolingo）上注册。 💻 使用说明...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Background information This is a GitHub repository keeping all relevant information about CVE-2018-7171. and more CVE-2018-7171 represents a directory/file traversal vulnerability in TwonkyMedia Server version 7.0.11-8.5 latest version...

CVE-2022-32114

Strapi v4.1.12 Explicación de la vulnerabilidad: Una vulnerabilidad de carga de archivos sin restricciones en la función Add New Assets de Strapi v4.1.12 permite a los atacantes ejecutar código arbitrario mediante un archivo manipulado. Vectores de ataque: Después de cargar un archivo que contien...

FecalFace

Description | Installation | Website | Issues FecalFace Description Fecal face was born from the concept of "Shit Bucket" where the idea is to try to rot the data they have about each other. Specifically, it is related to the detection and recognition of faces. The motivation of this project is...

iKy

Description | Installation | Website | | | Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Whether you use this project, have learned something from it, or just like it, please consider supporting it by buying me a coffee, so I can...

cve-2015-6612poc-forM

cve-2015-6612 POC for M reported by me and @WenXu from Keen put this under ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ and cd into it && calling mm...

VK-Scraper

VK Scraper vk-scraper is a command-line application written in Python that scrapes and downloads VK user's / community's data. Use responsibly. To get a better understanding of how it works, head to the docs. Features Scrape photos Scrape videos both uploaded and external Scrape saved photos Scra...