go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues. id: CVE-2017-18527 info: name: Pagination by BestWebSoft 1.0.7 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The pagination plugin before 1.0.7 for WordPress has multiple XSS issues. impact: |...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

CVE-2025-6389

CVE-2025-6389 Sneeit Framework 📡 不要错过下一次发布。 在 Telegram 上关注 @KNxploited —— 获取最新披露的 CVE、可用漏洞利用程序和顶级安全研究的权威频道。第一时间知晓，第一时间行动。 🧠 概述 CVE-2025-6389 是 WordPress 的 Sneeit Framework 插件中存在的一个 CVSS 9.8 严重 远程代码执行漏洞。 该漏洞存在于 sneeitarticlespaginationcallback 函数中，该函数盲目地将用户提供的输入 传递给 PHP 的...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — n8n HTTP 请求节点分页原型污染 → RCE 一个已认证的 n8n 1.123.43 工作流创建者通过 HTTP 请求节点的分页设置，在 n8n 服务端 进程中污染 Object.prototype，然后通过滥用 n8n 生成任务运行器的方式，将污染的 NODEOPTIONS 泄漏给子 node 进程并绕过代码节点沙箱，进而升级为远程代码执行 。...

CVE-2025-46171

vBulletin 3.x.x - 通过好友列表过载导致的拒绝服务攻击 摘要 /misc.php?do=buddylist 端点执行一个单一的、大型 JOIN 查询，该查询检索所有好友及其用户和会话信息，以检查在线状态。由于该查询没有分页或结果限制地处理整个好友列表，因此当列表增大时，它会变得极其消耗资源，并可能使数据库过载。 此问题易于利用，且设置要求最低。除了基本用户帐户之外，不需要任何特殊权限。只需膨胀好友列表，就足以给数据库带来严重压力。 受影响版本 ✅ 确认存在漏洞 : vBulletin 3.8.7 技术细节 此 SQL...

CVE-2026-88887

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

CVE-2026-88880

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

CVE-2026-88881

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

EUVD-2026-75437

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

CVE-2026-88887

Renovate (dependency update automation tool) is vulnerable to credential exfiltration when listing tags/digests for container images. The root cause is that Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches registry credentials to the follow-up...

EUVD-2026-75432

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images before 15.4.0, helm chart before 10.4.0), when fetching package versions from a NuGet registry , Renovate follows pagination URLs returned in the HTTP Link header without verifying the targ...

EUVD-2026-75431

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

CVE-2026-88881

Renovate versions before 44.11.3 are vulnerable to credential exfiltration when following pagination links in the HTTP Link header. The root cause is that the pagination URL returned by a GitHub server is not validated against the originally contacted host, allowing a malicious or compromised ser...