CVE-2020-7961

CVE-2020-7961 نص برمجي للاستغلال لـ CVE-2020-7961 تنفيذ عن بُعد للتعليمات البرمجية بدون مصادقة عبر JSONWS المراجع والإلهامات المقال الأصلي : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html مقال Synacktiv :...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...

Joomla! Component News Portal 1.5.x - Local File Inclusion

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1312 info: name: Joomla! Component News Portal 1.5.x - Local File...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. id: CVE-2022-23397 info: name: Cedar Gate EZ-NET = 6.8.0 - Cross-Si...

WordPress Job Portal < 2.0.6 - SQL Injection

The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape the city parameter before using it in a SQL statement,leading to a SQL injection vulnerability that is exploitable by unauthenticated users. This vulnerability can be used to extractsensitive data from the database or...

c41n

c41n c41n هي أداة إعداد نقطة وصول وهمية آلية. توفر c41n إعدادًا آليًا لعدة أنواع من نقاط الوصول الوهمية وهجمات التوأم الشرير Evil Twin. تقوم c41n بإعداد نقطة وصول بخصائص يحددها المستخدم الواجهة والاسم والقناة لنقطة الوصول، وتقوم بإعداد خادم DHCP لنقطة الوصول، وتوفر للمستخدم إمكانيات التقاط حركة...

wifi-agent

wifi-agent wifi-agent نقطة وصول مارقة. البرنامج مصمم للأغراض التعليمية فقط لرؤية كيفية عمل طريقة نقطة الوصول المارقة. أي استخدام غير ضروري للبرنامج محظور ولا يتحمل المصنع أي مسؤولية عن أي استخدام غير قانوني من قبل أي شخص. استخدم الأداة على مسؤوليتك الخاصة وتجنب أي إجراءات غير مدروسة. تعليمات...

CVE-2022-22954

Erkennung mehrerer Schwachstellenauslösepunkte, Mehrfaden-Batch-Erkennung, Befehlsausführung, Dateischreiben root@kitploit: // 单个目标漏洞检测 python CVE-2022-22954.py -u https://x.x.x.x // 命令执行 python CVE-2022-22954.py -u https://x.x.x.x -c "id" // 写文件 python CVE-2022-22954.py -u https://x.x.x.x -fn...

wifipumpkin3

Wifipumpkin3 Potente framework per attacchi con punti di accesso rogue. Panoramica wifipumpkin3 è un potente framework per attacchi con punti di accesso rogue, scritto in Python, che consente e offre a ricercatori di sicurezza, red teamer e reverse engineer di montare una rete wireless per condur...

CVE-2024-3400-RCE-Scan

Cyberspace-Mapping-Dork Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...

Skadi

pronunciato “SKAH-Dee”: simile a Scotty ma con un suono d è una gigantessa e dea della caccia nella mitologia norrena Si prega di leggere Lettera aperta agli utenti di Skadi, CyLR e CDQR Scopo Skadi è una raccolta gratuita e open source di strumenti che consente la raccolta, l'elaborazione e...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Iniezione di template lato server POC per Vmware CVE-2022-22954 Usa questa richiesta GET su una sola riga!! Questo eseguirà cat /etc/passwd...

PwnSTAR

PwnSTAR Piattaforme Progettato per Kali Linux. Funziona anche su Linux Mint 16. Dovrebbe funzionare su qualsiasi distribuzione Linux con qualche piccolo aggiustamento. Installazione Script di installazione Clone from github https://github.com/SilverFoxx/PwnSTAR.git Spostati nella directory...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2026-22557-check

CVE-2026-22557 Schwachstellenbewertungswerkzeug Erkennen Sie sicher, ob ein UniFi Network Application Controller anfällig für CVE-2026-22557 ist, ohne Störungen zu verursachen. Siehe den vollständigen Bericht im Bishop Fox Blog. Beschreibung CVE-2026-22557 ist eine nicht authentifizierte...

CVE-2022-22954

CVE-2022-22954 Achtung Bitte verwenden Sie dies auf eigenes Risiko. Dieses Repository dient ausschließlich Bildungszwecken, und wir sind strikt gegen alle illegalen Absichten. Wir übernehmen keine Verantwortung für illegale Aktivitäten im Zusammenhang mit diesem Repository. Seien Sie ethisch!...

CVE-2021-42664

CVE-2021-42664 CVE-2021-42664 - Gespeicherte Cross-Site-Scripting-Schwachstelle im Engineers Online-Portal-System. Technische Beschreibung: Eine gespeicherte XSS-Schwachstelle existiert im Engineers Online-Portal-System. Ein Angreifer kann diese Schwachstelle ausnutzen, um javascript im Namen des...

O365-Doppelganger

O365-Doppelganger O365-Doppelganger NON è un sostituto per attività di phishing aggressive. Esistono diversi altri strumenti che eseguono la cattura OAuth e OTA, che non è l'obiettivo di O365-Doppelganger. O365-Doppelganger è un rapido script utile per raccogliere le credenziali di un utente...

VMware-CVE-2022-22954-Command-Injector

VMware-CVE-2022-22954-Command-Injector Proof of Concept per lo sfruttamento di VMware CVE-2022-22954 Come funziona Questo semplice script Python effettua una richiesta GET all'URL specificato con l'aggiunta di /catalog-portal/ui/oauth/verify?error=&deviceUdid= e quindi seguito da una versione...