CVE-2024-57175

CVE-2024-57175: Cross-Site Scripting XSS almacenado en PHPGURUKUL Online Birth Certificate System v1.0 Descripción Se identificó una vulnerabilidad de Cross-Site Scripting XSS almacenado en PHPGURUKUL Online Birth Certificate System v1.0 en la página /user/certificate-form.php. Esta vulnerabilida...

regreSSHion

regreSSHion Perfil de Chef Inspec para comprobar la vulnerabilidad regreSSHion CVE-2024-6387 Por favor, modifíquelo según sus propias necesidades. Se proporciona como ejemplo...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...

EUVD-2026-87696

ClawHub openclaw/clawhub application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The preview accepts a user-supplied image URL and checks the textual hostname against private-address patterns, but does not validate or pin the resolv...

CVE-2025-66683

CVE-2025-66683 A Cross-Site Request Forgery CSRF vulnerability exists in the administrator profile update functionality of CarRentalMS v2.0. The affected endpoint does not implement anti-CSRF protections, allowing an attacker to perform unauthorized profile modifications on behalf of an...

CVE-2024-6366

Para crear un módulo de Metasploit para explotar la vulnerabilidad RCE en el plugin User Profile Builder de WordPress anterior a la versión 3.11.8, necesitamos aprovechar la falta de autorización adecuada en la funcionalidad de carga de archivos multimedia. Así es como puedes crear dicho módulo d...

external_c2

概要 Cobalt Strike には、externalc2 と呼ばれる新機能/実験的機能が含まれています。これにより、マリアブルプロファイルをバイパスし、開発者が独自のチャネルを作成できるようになります。 このコードは POC であり、最終的には現実の問題の解決策となりました。 コード内容 c2file.c: クライアントのC言語実装（ビーコンと通信するプロセス） c2filedll.c, c2filedll.h, c2file.py: クライアントのPython実装（DLLを使用、ビーコンと通信するプロセス）。複雑なチャネルを迅速に開発可能。 pythonc2ex.py:...

roller-csrf

Apache Roller v6.1.2 - Falsificación de Solicitudes entre Sitios CSRF en la Actualización de Perfil Detalles de la Vulnerabilidad Versión : v6.1.2 Fecha : 2025-11-09 Autor del Exploit : Van Lam Nguyen Facebook : https://www.facebook.com/vanlam1412 Página del Proveedor : https://roller.apache.org...

CVE-2025-65675

CVE-2025-65675 Vulnerabilidad de Cross-Site Scripting XSS Almacenado en Classroomio LMS 0.1.13 que permite a atacantes autenticados ejecutar código arbitrario a través de imágenes de perfil SVG manipuladas. Descubierto por - Rivek Raj Tamang RivuDon, Sikkim, India. Producto afectado: ClassroomIO...

malleable-c2

Cobalt Strike Malleable C2 設計およびリファレンスガイド このプロジェクトは、Cobalt Strike Malleable C2 プロファイルを設計する際のリファレンスとして使用することを目的としています。 使用前に必ず ./c2lint /path/to/my.profile でプロファイルを検証してください！ Malleable C2 プロファイルガイダンス 以下は、Malleable C2 の理解を深めるためのものです。 MalleableExplained.md : プロファイルのクイックリファレンスガイド ThreatExpress - A Deep...

osi.ig

오픈소스 인스타그램 정보 수집 도구 최근에 인스타그램이 "알 수 없는" 요청에 대해 JSON 대신 HTML 응답을 보내기 시작했습니다. 로그인 없이 이 도구를 작동시키길 정말 원했지만 더 이상 인스타그램을 사용하지 않기 때문에, 몇 가지 방법을 시도해봤으나 작동하지 않았습니다 :/ 어쨌든 많은 사람들이 이 도구를 사용하고 있으니, 임시 로그인을 추가해서 최대한 빨리 작동하게 만들겠습니다. Instagram OSINT 도구는 일반적으로 프로필만 봐서는 알 수 없는 다양한 정보를 인스타그램 계정으로부터 수집합니다. 수집되는 정보는...

SeeProxy

SeeProxy Proxy inverso en Golang con validación de perfiles maleables de CobaltStrike. La premisa de esta herramienta es no abrir tu teamserver al mundo, sino a una única instancia de SeeProxy. De esta forma, cada petición que llegue a tu teamserver será tráfico C2 legítimo. Ejemplo de despliegue...

CVE-2024-55271

Gym Management System CVE-2024-55271 A GYM management system built using PHP and MySQL. Auditor Shoaib Alam - LinkedIn Profile Description CSRF Vulnerability in Profile Update Section A Cross-Site Request Forgery CSRF vulnerability has been identified in the Gym Management System. This issue is...

AutoFunkt

AutoFunkt root@kitploit: d8888 888 8888888888 888 888 d88888 888 888 888 888 d88P888 888 888 888 888 d88P 888 888 888 888888 .d b. 8888888 888 888 88888b. 888 888 888888 d88P 888 888 888 888 d88 88b 888 888 888 888 "88b 888 .88P 888 d88P 888 888 888 888 888 888 888 888 888 888888K 888 d8888888888...

CVE-2026-47679

GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions...

CVE-2026-47679 GLPI: arbitrary file deletion

GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler decryption of stored password The script in this repository allows you to decrypt the passwords stored in the SFTP configuration file for a JobScheduler instance. Description SOS JobScheduler is a tool for remote system administration that allows users to call...

CVE-2026-91839

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...

EUVD-2026-87248

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

CVE-2026-91838

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...