CVE-2019-0232

CVE-2019-0232 漏洞利用 CGI Servlet 远程代码执行 RCE – Windows上的Apache Tomcat 参考 : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat在CGI...

Agent-Reach

👁️ Agent Reach 给你的 AI Agent 一键装上互联网能力 当下最稳的接入方式，替你选好、装好、体检好——接入方式会换代，你不用操心 快速开始 · English · 日本語 · 한국어 · 支持平台 · 设计理念 ❤️赞助商 想出现在这里？ 点击折叠 | BrowserAct 支持从 Amazon、LinkedIn、X、Google Maps 等复杂网站提取你需要的任意数据。你只需用自然语言描述抓取需求，Agent 就会基于真实浏览器自动探索并测试页面流程，生成可靠、可复用的数据采集 Bot，并返回结构化结果。无需手动构建爬虫，无需编写代码。BrowserAct...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 使用方法: -t http://vuldomain.com //单个IP -f urls.txt //读取文件批量扫描，采用多线程，速度快 -c command //自定义命令，默认是whoami...

CVE-2026-7175 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;...

EUVD-2026-90745

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;...

CVE-2026-7175 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;...

CVE-2026-7175

The Entradium platform by Crocantickets is vulnerable to a script injection flaw in the My Profile section. Specifically, the Business Name parameter within the /promoters/edit endpoint fails to properly sanitize input, allowing for the injection of JavaScript code . This malicious script can exe...

CVE-2026-16232

CVE-2026-16232 概述 一个概念验证脚本，用于利用 CVE-2026-16232，即一个通过使用应用程序令牌绕过 SmartConsole 登录过程的身份验证漏洞。此漏洞影响 Check Point Security Management Server 和 Multi-Domain Security Management Server MDS。 如需完整的技术分析，请参阅我们的 Rapid7 分析。 用法 $ python3 CVE-2026-16232.py --help usage: CVE-2026-16232.py -h --target TARGET...

CVE-2026-7174

The Entradium platform by Crocantickets is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw exists in the Name and Field parameters of the /tools/discount_wizard/discount_config endpoint during the discount creation process. Attackers can inject malicious JavaScript code...

CVE-2026-7174 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discountwizard/discountconfig during the process of creating discounts assigned to an event. This vulnerability allows JavaScript code to ...

CVE-2026-7174 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discountwizard/discountconfig during the process of creating discounts assigned to an event. This vulnerability allows JavaScript code to ...

EUVD-2026-90744

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discountwizard/discountconfig during the process of creating discounts assigned to an event. This vulnerability allows JavaScript code to ...

CVE-2026-7173 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to the victim and steal their session data. Stored XSS The City parameter in the endpoint /events//editgeneral during...

CVE-2026-7173

The Entradium platform by Crocantickets contains Cross-Site Scripting (XSS) vulnerabilities. A Stored XSS exists in the City parameter of the /events//edit_general endpoint, allowing JavaScript injection that executes on an event's public page when editing events assigned to a promoter. Additiona...

EUVD-2026-90743

CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to the victim and steal their session data. Stored XSS The City parameter in the endpoint /events//editgeneral during...

CVE-2026-7173 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to the victim and steal their session data. Stored XSS The City parameter in the endpoint /events//editgeneral during...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

burpfox

🦊 BurpFox Burp Suite の拡張機能で、Dalfox XSSスキャナをワークフローに直接統合します。 特徴 🎯 右クリックスキャン - Proxy History や Repeater からリクエストを直接スキャンします。 ⚙️ Dalfoxの全オプション - コンテキスト認識、WAF回避、Blind XSSなど。 前提条件 1. Dalfoxのインストール DalfoxはBurpFoxを使用する前にシステムにインストールされている必要があります。 macOS Homebrew: brew install dalfox Linux Go: go install...

hosts

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...