CVE-2021-42671

CVE-2021-42671 CVE-2021-42671 - Vulnerabilidad de control de acceso roto en el sistema de portal en línea de ingenieros. Descripción técnica: Existe una vulnerabilidad de control de acceso roto en el Portal en línea de ingenieros. Un atacante puede aprovechar esta vulnerabilidad para eludir los...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...

Sophos Firewall <= 19.0 MR1 - Remote Code Execution

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. id: CVE-2022-23397 info: name: Cedar Gate EZ-NET = 6.8.0 - Cross-Si...

Joomla! Component News Portal 1.5.x - Local File Inclusion

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1312 info: name: Joomla! Component News Portal 1.5.x - Local File...

WordPress Job Portal < 2.0.6 - SQL Injection

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape the city parameter before using it in a SQL statement,leading to a SQL injection vulnerability that is exploitable by unauthenticated users. This vulnerability can be used to extractsensitive data from the database or...

Liferay Portal - Open Redirect

HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' U+FFFD, which allows remote...

CVE-2024-3400

CVE-2024-3400 PoC solo con fines educativos. úsalo únicamente en servidores que tengas permiso de probar. Cómo usar dependencias: root@kitploit: $ pip install rich escanear targets.txt: root@kitploit: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check...

CVE-2025-51820

CVE-2025-51820 在 Shopping Portal v1.0 中发现了一个严重的远程代码执行 RCE 漏洞 CVE-2025-51820。 🚨 在线购物门户项目 v1.0 中的远程代码执行漏洞 CVE-2025-51820 🔍 简介 在当今数字化世界中，远程代码执行 RCE 仍然是最危险的 Web 应用程序漏洞之一。本报告重点介绍了 phpgurukul 开发的 在线购物门户项目 v1.0 中的一个严重远程代码执行漏洞 CVE-2025-51820。利用此漏洞，攻击者可以远程执行任意系统命令，可能导致系统完全受损。 🛡️ 漏洞概述 CVE 编号 ：CVE-2025-51820...

CVE-2022-1040

CVE-2022-1040-sophos-rce-poc sophos rce poc Sophos Webmin 门户认证绕过和远程代码执行一体化脚本； 此漏洞影响 Sophos Firewall v18.5 MR3 18.5.3 及更早版本 缓解措施： 尽快更新到最新版本 https://support.sophos.com/support/s/article/KB-000043853?language=enUS 为避免滥用此脚本，它不是免费的： 它包含脚本和从 Shodan 新转储的约19万个IP列表，其中可能存在大量易受攻击的目标。 狩猎愉快...

CVE-2024-39090-PoC

CVE-2024-39090 PoC 漏洞利用脚本 该 PoC 脚本利用了 CVE-2024-39090，即 PHPGurukul Online Shopping Portal v2.0 中的一个 CSRF 到存储型 XSS 漏洞。它自动化 CSRF 攻击以注入持久的 JavaScript 载荷，当特权用户访问受影响页面时，这些载荷会执行，从而实现会话劫持或凭证窃取等操作。...

fluxion

Fluxion 是 MITM WPA 攻击的未来 Fluxion 是 vk496 的 linset 的重制版，希望拥有更少的 bug 和更多的功能。它与最新的 Kali（滚动版）兼容。最新构建（稳定版）和（测试版）可在此处找到 此处 https://sourceforge.net/projects/wififluxion/files/?source=navbar。如果你是新手，或者对项目不太了解，请查看 wiki https://github.com/deltaxflux/fluxion/wiki/Tutorial。攻击大多是手动的，但实验版本会自动处理稳定版本的大多数功能。...

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Bypass del portal cautivo de Zyxel mediante identidad de Facebook enviada por un navegador de confianza Este repositorio empaqueta el informe público, el script de verificación rápida y artefactos de soporte seleccionados para CVE-2026-8508. Qué es esto CVE-2026-8508 es una falla d...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2023-38890

CVE-2023-38890 描述 Online Shopping Portal Project V3.1 允许远程攻击者通过登录表单执行任意 SQL 命令/查询，导致未授权访问和潜在的数据篡改。该漏洞源于对用户提供的用户名字段输入验证不足，从而引发 SQL 注入攻击。 漏洞利用标题： Online Shopping Portal Project V3.1 PHPgurukul - Time-Based Blind Sqli 漏洞利用作者： Akshad Joshi 厂商主页： https://phpgurukul.com 软件链接：...

f32

La f32 es una placa de desarrollo ESP32 ultracompacta diseñada para montarse directamente detrás de un conector USB-C. La PCB mide solo 9.85 mm x 8.45 mm. Está alimentada por el microcontrolador ESP32-C3FH4 y fue creada principalmente para investigación y como una especie de prueba de estrés para...

CVE-2021-42669

CVE-2021-42669 CVE-2021-42669 - Ejecución remota de código mediante vulnerabilidad de carga de archivos sin restricciones en el sistema de portal en línea de ingenieros. Descripción técnica: Existe una vulnerabilidad de carga de archivos sin restricciones en el sistema de Portal en Línea de...

CVE-2025-48461

CVE-2025-48461 Cookies de sesión predecibles que pueden ser forzados por fuerza bruta para obtener acceso no autorizado al portal Advantech WISE Resumen Durante el examen del portal web Advantech WISE-4060, he descubierto que las cookies de sesión utilizadas para autenticarse en el portal web...

WiFi-Pineapple-MK7_Evil-Portal

WIFI PINEAPPLE MARK VII - 邪恶门户 领先的非法接入点及WiFi渗透测试工具包，用于近距离操作。 被动和主动攻击分析易受攻击和配置错误的设备。 https://hak5.org/collections/sale/products/wifi-pineapple 作者 :: TW-D 版本 :: 1.0.0 版权 :: Copyright c 2024 TW-D 许可证 :: 遵循与Ruby相同的条款分发 要求 :: PHP = 8.1, Ruby = 2.7.0p0 和 WiFi Pineapple Mark VII 2.1.3-stable...