zclaw

zclaw أصغر مساعد شخصي بالذكاء الاصطناعي ممكن لـ ESP32. zclaw مكتوب بلغة C ويعمل على لوحات ESP32 بهدف صارم لميزانية البرنامج الثابت الكامل يبلغ = 888 KiB في البناء الافتراضي. يدعم المهام المجدولة، والتحكم في GPIO، والذاكرة الدائمة، وتكوين الأدوات المخصصة من خلال اللغة الطبيعية. الحد 888 KiB هو حجم...

personal-security-checklist

Persönliche Sicherheits-Checkliste Die ultimative Liste mit Tipps zur Sicherung Ihres digitalen Lebens 🌐digital-defense.io 👉 Checkliste lesen 👈 Inhalte Die Checkliste Die Webseite Die API Mitwirken Danksagungen Lizenz Die Checkliste Sie können die vollständige Checkliste in CHECKLIST.md lesen. Um...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

cheat-engine

Cheat Engine Cheat Engine è un ambiente di sviluppo focalizzato sulla modifica di giochi e applicazioni per uso personale. Scarica Ultima versione Versioni precedenti Link Sito web Forum Forum alternativo Forum alternativo Wiki Social Media Reddit Twitter Dona...

CVE-2026-9830

CVE-2026-9830 PoC di valutazione dell'API BookingPress Pro Questo repository contiene un proof of concept in Python per validare un'esposizione non autenticata segnalata dell'API REST di BookingPress Pro. Una risposta positiva può contenere informazioni su prenotazioni e clienti, che possono...

CVE-2022-1175

CVE-2022-1175 Gitlab Stored XSS, kann in einem Issue eines Projekts platziert werden, entweder in einem eigenen oder in einem fremden. Ermöglicht Angriffe wie das Erstellen und Stehlen eines Personal Access Tokens PAT von jedem, der ein Issue besucht. PATs können dann vollen Gitlab-API-Zugriff al...

CVE-2023-43838

CVE-2023-43838 Una vulnerabilità di upload arbitrario di file in Personal Management System v1.4.64 consente agli attaccanti di eseguire codice arbitrario caricando un file SVG appositamente realizzato come avatar del profilo utente. Informazioni aggiuntive 1. Creare alert.svg con il seguente...

CVE-2025-28355

CVE-2025-28355 È stato identificato che l'applicazione https://github.com/Volmarg/personal-management-system è vulnerabile ad attacchi CSRF. Una delle molte azioni che un attaccante può eseguire è ingannare un utente legittimo per fargli eseguire una richiesta cross-site che modificherà la sua...

CVE-2026-58108

The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves that as an implicit cross join, so the filter does not constrain the delete to the calling user's own token in the way the code reads as...

CVE-2024-27564

CVE-2024-27564 Descrizione: Una vulnerabilità in pictureproxy.php consente a un attaccante remoto di eseguire richieste arbitrarie iniettando URL nel parametro url. Questa vulnerabilità SSRF può essere sfruttata senza autenticazione, rendendola particolarmente pericolosa. Il codice vulnerabile si...

Laravel-vul

Laravel-vul Una catena POP di Laravel 5 scoperta tramite audit personale, codice vulnerabilità: CVE-2021-43503 Dettagli nelle issues...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

sunflower_exp

CVE-2022-10270 Versioni interessate: Sunflower Personal Edition Windows --thread numero di thread durante la scansione numero di thread predefinito: 100 --help Aiuto sunflowerpocexp.py strumento di verifica e scansione delle vulnerabilità Rilevamento delle porte: eg: python sunflowerpocexp.py...

WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure

WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no...

Personal Weather Station Dashboard 12 - Directory Traversal

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext. id: CVE-2025-47423 info: name: Personal Weather...

Schools Alert Management Script - Arbitrary File Read

Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal. id: CVE-2018-12054 info: name: Schools Alert Management Script - Arbitrary File Read author: wisnupramoedya severity: high description: Schools Alert...

FREEDOM Administration - Default Login

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires ma...

Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

WordPress Personal Dictionary <1.3.4 - Blind SQL Injection

WordPress Personal Dictionary plugin before 1.3.4 contains a blind SQL injection vulnerability. The plugin fails to properly sanitize user-supplied POST data before being interpolated in an SQL statement and executed. An attacker can possibly obtain sensitive information, modify data, and/or...

CVE-2025-51400

Exploit-Titel: LiveHelperChat =4.61 – Stored Cross Site Scripting XSS über persönliche vorgefertigte Nachrichten Personal Canned Messages Datum: 09/06/2025 Exploit-Autor: Manojkumar J TheWhiteEvil LinkedIn: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Hersteller-Homepage:...