19878 matches found
FlatPress 1.2.1 - Stored Cross-Site Scripting
FlatPress 1.2.1 contains a stored cross-site scripting vulnerability that allows for arbitrary execution of JavaScript commands through blog content. An attacker can possibly steal cookie-based authentication credentials and launch other attacks. id: CVE-2021-41432 info: name: FlatPress 1.2.1 -...
Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion
Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. id: CVE-2017-1000029 info: name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File...
Umbraco <7.4.0- Server-Side Request Forgery
Umbraco before version 7.4.0 contains a server-side request forgery vulnerability in feedproxy.aspx that allows attackers to send arbitrary HTTP GET requests via http://local/Umbraco/feedproxy.aspx?url=http://127.0.0.1:80/index. id: CVE-2015-8813 info: name: Umbraco 7.4.0- Server-Side Request...
Cacti < 1.2.25 Insecure Deserialization
Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...
LaRecipe < 2.8.1 Remote Code Execution via SSTI
LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection SSTI, which could potentially lead to Remote Code Execution RCE in vulnerable configurations. id: CVE-2025-53833 info:...
DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been...
Zitadel - User Registration Bypass
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...
ThinkPHP < 3.2.4 - Remote Code Execution
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...
LionWiki <3.2.12 - Local File Inclusion
LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...
Processwire CMS <2.7.1 - Local File Inclusion
Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...
Node.JS System Information Library <5.3.1 - Remote Command Injection
Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...
DataEase - Remote Code Execution
DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...
CipherGist
このGitHubリポジトリが役に立ったと思われたら、スターを付けることをご検討ください！ ⭐️ 🛡️ CipherGist - GitHub Gist を利用したエンドツーエンド暗号化メッセージング CipherGist は、GitHub Gist をバックエンドとして利用した、軽量でセキュアかつオープンソースの暗号化メッセンジャーです。高度な暗号化技術として NaCl libsodium を採用し、意図された受信者のみがメッセージを復号できることを保証します。中央サーバーは不要、メタデータの追跡もありません。純粋な暗号化メッセージングだけを提供します。 ✨ 機能 ✅ エンドツーエンド暗号化...
Door404
Door404 Door404は、MrSqarとRizerによって開発されたオープンソースプロジェクトです。 このプロジェクトは2つの理由で開発されました。 第一 " 初心者がコーディングを学ぶのを助けること " 第二 " 初心者のサーバー管理者が新しい保護テクニックを学ぶのを助けること " 要件 PHP PHP cURL OS Linux スクリーンショット 動画 : ライセンス DWTFPL root@kitploit: あなたが気にしなければ、何をしても構わないパブリックライセンス 複製、配布、および改変に関する条項...
avet
AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...
ncrack
ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...
Atlas
Atlas - 快速SQLMap Tamper脚本建议工具 v1.0 Atlas 是一款开源工具，可以根据返回的状态码建议 SQLMap 的 tamper 脚本，以绕过 WAF/IDS/IPS。 截图 安装 root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+ 使用方法 root@kitploit: $ python atlas.py --url http://site.com/index.php?id=PriceASC...
de4dot
Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...
Endurance-Wiper
Endurance-Wiper Beta - 开源 一款使用 .NET 框架、以 C 编写的小型擦除器恶意软件。 如果你来自 Twitter 或其他任何渠道，你可以清楚地看出该项目正处于积极开发中。 你可以随时在此查看更新。 https://breached.vc/Thread-active-development-custom-wiper-ransomware 系统要求 Visual Studio 22 Visual Studio C 桌面开发包 设置 1. 克隆仓库：git clone https://github.com/IntelBroker/Endurance-Wiper/ 2...