fleet

🌐 IT This page details processes specific to working with and within this department. Team...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthhentifizierte SQL-Injection in CMS Made Simple Beschreibung CVE-2019-9053 ist eine time-based blind SQL-Injection-Schwachstelle, die CMS Made Simple in Versionen ≤ 2.2.9 betrifft. Sie erfordert keine Authentifizierung. Der anfällige Parameter ist m1idlist im Modul News...

Ditty < 3.1.25 - Cross-Site Scripting

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-4148 info: name: Ditty 3.1.25 ...

Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting

The Ditty formerly Ditty News Ticker WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting XSS vulnerability. id: CVE-2022-0533 info: name: Ditty formerly Ditty News Ticker 3.0.15 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | The Ditty formerly...

Joomla! Component News Portal 1.5.x - Local File Inclusion

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1312 info: name: Joomla! Component News Portal 1.5.x - Local File...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

worldmonitor

World Monitor 简体中文 | 日本語 Globales Echtzeit-Intelligence-Dashboard — KI-gestützte Nachrichtenaggregation, geopolitisches Monitoring und Infrastruktur-Tracking in einer einheitlichen Oberfläche für Lagebewusstsein. !Commodity...

cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 PoC di RCE Bersaglio: 2.1.2 Questo script PoC si basa su una semplice implementazione dell'exploit originale di BobbySox. L'exploit originale è un modulo MSF di Akuss. Questo script richiede l'indirizzo IP o il dominio del target insieme alle credenziali;...

CVE-2023-43358-CMSmadesimple-Stored-XSS---News

CMSmadesimple Stored XSS v2.2.18 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in CMSmadesimple v.2.2.18 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel campo Title del menu Content - News. Vettori di attacco:...

osint-suite-tools

Importante! O autor não se responsabiliza pelo uso desta aplicação. Esta aplicação é a versão open source com licença GNU. No entanto, a versão paga obtém melhores resultados através de algoritmos e cruzamento de dados que esta versão não realiza. Para que a aplicação funcione corretamente, é...

CVE-2026-6184-stored-XSS

XSS Memorizzato nel Titolo delle Notizie - Simple Content Management System PHP Descrizione Esiste una vulnerabilità di Cross-Site Scripting XSS Memorizzato in Simple Content Management System PHP. Il campo Titolo delle Notizie nel pannello di amministrazione non sanifica l'input dell'utente prim...

cyber_rss

cyberrss cert 11 ASD ACSC Alerts Australia CERT-FR ANSSI CISA Cybersecurity Advisories CISA ICS Advisories CISA ICS Medical Advisories JPCERT/CC JPCERT/CC Blog UK NCSC All RSS Feed UK NCSC Guidance UK NCSC News UK NCSC Reports news 11 Bleeping Computer forum BleepingComputer CyberScoop Dark Readi...

CVE-2019-9053-port-py3

CVE-2019-9053 漏洞利用 - Python 3 这是 CVE-2019-9053 漏洞利用的 Python 3 移植版本，针对 CMS Made Simple CMSMS 2.2.10 之前的版本。该漏洞允许通过 News 模块接口进行 SQL 注入。 示例输出 已在 TryHackMe Simple CTF Challenge 上测试。 描述 该利用程序利用了 CMS Made Simple 的 News 模块中的 SQL 注入漏洞。它可以： 提取 CMS 的 salt 导出管理员用户名 导出管理员邮箱 导出管理员密码哈希 可选使用提供的字典破解密码 快速开始...

Iran-War-Media

Iran War Media Monitor Leggi l'approfondimento completo Introduzione Questo progetto monitora la copertura mediatica della guerra tra Iran, Israele e Stati Uniti. Puoi usare questo repository per: 1. Creare un corpus di articoli giornalistici in inglese 2. Identificare autori e testate...

WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 Repository con tutto ciò che ho per tracciare l'impatto di WSFTP CVE-2023-40044 Include organizzazioni e domini potenzialmente interessati che utilizzano metodi header. Ho anche creato un news ticker che tiene traccia delle nuove notizie su MOVEit e WSFTP, disponibile su...

CVE-2022-34963

OpenTeknik LLC OSSN RÉSEAU SOCIAL OPEN SOURCE v6.3 LTS Explication de la vulnérabilité : OpenTeknik LLC OSSN RÉSEAU SOCIAL OPEN SOURCE v6.3 LTS a été découvert comme contenant une vulnérabilité de script intersite stocké XSS via le module News Feed. Vecteurs d'attaque : L'attaquant doit publier...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 लेखक: सर्जियो विवरण: CMSmadesimple v.2.2.18 में क्रॉस-साइट स्क्रिप्टिंग भेद्यता एक स्थानीय हमलावर को Content - News Menu के Extra में क्राफ्टेड स्क्रिप्ट के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। हमले के वेक्टर: स्क्रिप्टिंग "Content - News Menu" क...

CVE-2026-73935

creationtimestamp| type| source ---|---|--- 2026-08-19 03:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfqiizcbc27 2026-08-19 17:16:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62832

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:39+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 19:05:38+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mstcnzik6k22 2026-08-11 19:19:51+00:00| seen|...