EasySpider 0.6.2 - Arbitrary File Read

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input...

WordPress JSmol2WP <=1.07 - Local File Inclusion

WordPress JSmol2WP plugin 1.07 is susceptible to local file inclusion via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context...

Gradio - Open Redirect

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 and 3.0.1, Spring Boot 1.5.9 and 2.0 M6 contain a remote code execution caused by processing malicious PATCH requests with crafted JSON data, letting attackers execute arbitrary Java code, exploit requires sending malicious PATCH requests. id: CVE-2017-8046 info: name: Spri...

Moodle - Cross-Site Scripting/Remote Code Execution

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...

D-Link Central WifiManager - Server-Side Request Forgery

D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...

Elestio Memos <= v0.24.0 - Server-Side Request Forgery

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks. id: CVE-2025-22952 info: name: Elestio Memos = v0.24.0 - Server-Side Request Forgery author: iamnoooob,rootxharsh,pdresearc...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. id: CVE-2024-31223...

Cloudlog - SQL Injection

Cloudlog 2.6.15 contains a SQL injection caused by unsanitized input in oqrs.php requestform, letting attackers execute arbitrary SQL commands via stationid or callsign, exploit requires sending crafted request. id: CVE-2024-48259 info: name: Cloudlog - SQL Injection author: s4e-io severity: high...

Oracle Weblogic - Server-Side Request Forgery

An unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. id: CVE-2014-4210 info: name: Oracle Weblogic - Server-Side Request Forgery author:...

proxify

Features • Installation • Usage • Running Proxify • Installing SSL Certificate • Applications of Proxify • Join Discord Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy...

GraphQLGrapper

Una extensión para recopilar funciones GraphQL del historial de solicitudes de Burpsuite Cómo usar Necesitarás el jar independiente de Jython 1. Ve a la pestaña Extensions 2. Haz clic en Add 3. Elige GraphQLGrapper.py 4. Ahora puedes usarlo haciendo clic derecho en el objetivo y eligiendo la...

http-request-smuggling

HTTP Request Smuggling Detection Tool HTTP request smuggling is a high severity vulnerability which is a technique where an attacker smuggles an ambiguous HTTP request to bypass security controls and gain unauthorized access to performs malicious activities, the vulnerability was discovered back ...

http-request-smuggling

HTTP请求走私检测工具 HTTP请求走私是一种高严重性漏洞，攻击者通过走私模糊的HTTP请求来绕过安全控制并获取未授权访问以执行恶意活动。该漏洞最早于2005年由watchfire发现，随后于2019年8月由James Kettle albinowax重新发现，并在DEF CON 27和Black-Hat USA上展示。要了解更多关于此漏洞的信息，可以参考他在Portswigger网站上记录详尽的研究博客。因此，此安全工具的思路是针对给定主机检测HRS漏洞，检测基于时间延迟技术与给定的排列组合。要了解更多关于此工具的信息，我强烈建议阅读我关于此工具的博客文章。 技术概述...

rep-chrome

rep+ rep+ es una extensión ligera para Chrome DevTools inspirada en Repeater de Burp Suite, ahora potenciada con IA. A menudo necesito modificar algunas solicitudes sin iniciar todo el stack de Burp, así que construí esta extensión para mantener mi flujo de trabajo rápido, enfocado e inteligente...

Preferred-Network-List-Sniffer

首选网络列表嗅探器 - PNLS 首选网络列表嗅探器 （PNLS）是一款红队 Wi-Fi 审计工具，提供简单的 Web 界面，能够从设备的首选网络列表（PNL）^2中截获 SSID^1。这是通过嗅探附近区域的探测请求实现的，随后解析这些请求以提取 SSID 及其他信息，并最终将信息传递到 Web 界面。该项目的主要动机是研究 802.11 探测请求及其传输的数据所带来的隐私风险。 图 1 ：PNLS 系统概述 !WARNING 本项目中的所有内容仅供安全研究使用。 !NOTE 本项目是我正在进行中的《Wi-Fi 网络隐私保护》研究的一部分。 工作范围演示 要查看 PNLS...

CVE-2026-37064

CVE-2026-37064 Enumeración de usuarios en /vfm-admin/ajax/usr-check.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado enumerar los usuarios de la aplicación mediante el envío de una solicitud POST especialmente diseñada al endpoint afectado con un parámetro 'username'...

CVE-2021-21311

CVE-2021-21311 Descripción SSRFServer-side Request Forgery en Adminer herramienta de gestión de bases de datos de código abierto desde v4.0.0 v4.7.8 parcheado en v4.7.9 Commit del parche Uso exploit.py -h -target TARGET -redirect REDIRECT -host HOST -port PORT options: -h, --help show this help...

CVE-2022-22954

CVE-2022-22954 Vulnerability Description Workspace ONE Access provides a unified application portal through which all enterprise applications can be accessed securely, and can be used for single sign-on. In CVE-2022-22954, an attacker can craft a malicious request to cause template injection,...

NFSundown

Resumen Exploit de prueba de concepto para NFSundown CVE-2025-38089. Puede provocar de forma remota la caída del kernel en un servidor NFS. Detalles Un atacante remoto puede provocar una desreferencia de puntero nulo en el kernel y causar su caída enviando una solicitud RPC especialmente...