CVE-2023-50072

CVE-2023-50072 A stored cross-site scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

pockint

POCKINT también conocido como Pocket Intelligence es la navaja suiza OSINT para profesionales de DFIR/OSINT. Un programa GUI ligero y portátil, proporciona a los usuarios capacidades esenciales de OSINT en un factor de forma compacto: la caja de entrada de POCKINT acepta indicadores típicos URL,...

CVE-2020-24955

CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Local Privilege Escalation SUPERAntiSpyware Professional X Trial versions prior to 10.0.1206 are vulnerable to local privilege escalation because it allows unprivileged users to restore quarantined files to a privileged location...

WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional Map In Your Language plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such ...

professional-services

Professional Services Common solutions and tools developed by Google Cloud's Professional Services team. Disclaimer This repository and its contents are not an officially supported Google product. License All solutions within this repository are provided under the Apache 2.0 license. Please see t...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

Gurp

Requirements BurpSuite Professional version v2.0.0beta or greater from PortSwigger Enable the API under User Options Misc REST API. Dependencies root@kitploit: go get -u -v github.com/joanbono/Gurp Add rsrc to the $PATH to build Windows binaries using the icon. Run make all to build binaries for...

CVE-2024-27518

CVE-2024-27518 - SUPERAntiSpyware Professional X LPE PoC This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: SUPERAntiSpyware Professional X and all editions...

CVE-2025-39247

CVE-2025-39247 Target: HikCentral Professional HCMP, central VMS server CVE: CVE-2025-39247 — Access Control Vulnerability CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected: V2.3.1 – V2.6.2 and V3.0.0 Fixed: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Disclosed: 2025-08-28 Analysis date:...

BurpSuite_Pro_v1.7.37

Update burpsuiteprov2.0beta.jar root@kitploit: Burp Suite 2.0 beta is now available for Professional users. This is a major upgrade with many new features, including: A new crawler that is able to automatically handle sessions, detect changes in application state, handle multiple login captures,...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

CVE-2026-15244

CVE-2026-15244 affects the HUSKY WordPress plugin prior to 1.4.1. A stored setting value is not sanitized against directory traversal before being concatenated into a file inclusion path, enabling a user with the shop manager capability to cause inclusion and execution of arbitrary local files. T...

CVE-2026-52854

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:02+00:00| published-proof-of-concept| https://github.com/ProfessionalWiki/Maps/security/advisories/GHSA-4h7g-5542-v3fc 2026-08-18 23:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd56wys52r 2026-08-19...

vulnerability-assessment-metasploitable2

Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...

CVE-2017-20274

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking,...

CVE-2017-20274

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking,...

EUVD-2017-19001

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking,...

CVE-2026-7300

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Web Integration Service allows Filter Failure through Buffer Overflow.This issue affects Connext Professional: from 7.4.0 before 7., from 7.0.0 before 7.3.1.3, from 6.1.2 before 6.1...

CVE-2026-3894

Out-of-bounds Read vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.0.0 before 5.2...