WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch

When dashboard authentication is disabled, Bifrost accepts an enabled custom plugin with an HTTP URL as its path. The gateway fetches the URL before attempting to load it. This template confirms the unauthenticated server-side request with an out-of-band callback; it does not assert code executio...

webp_server_go 0.4.0 - Path Traversal

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. id: CVE-2021-46104 info: name: webpservergo 0.4.0 - Path Traversal author: pikpikcu severity...

Dify v1.6.0 - Server-Side Request Forgery

Dify v1.6.0 contains a server side request forgery caused by improper validation in controllers.console.remotefiles.RemoteFileUploadApi, letting attackers make arbitrary requests from the server, exploit requires network access. id: CVE-2025-56520 info: name: Dify v1.6.0 - Server-Side Request...

ChanCMS <= 3.3.0 - Server-Side Request Forgery

yanyutao0402 ChanCMS 3.3.0 contains a server-side request forgery caused by manipulation of the "taskUrl" argument in /cms/collect/getArticle, letting remote attackers make arbitrary requests, exploit requires no special privileges. id: CVE-2025-10211 info: name: ChanCMS = 3.3.0 - Server-Side...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

CVE-2024-27564

CVE-2024-27564 Descripción: Una vulnerabilidad en pictureproxy.php permite a atacantes remotos realizar peticiones arbitrarias inyectando URLs en el parámetro url. Esta vulnerabilidad SSRF puede explotarse sin autenticación, lo que la hace particularmente peligrosa. El código vulnerable está en e...

templates

Plantillas de informes Notas sobre la estructura de directorios: El script generate-directories.py obtiene la versión más reciente de la estructura VRT desde GitHub y crea los directorios que falten. No elimina ni renombra directorios basándose en elementos eliminados de VRT. El script sigue los...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

CVE-2022-29056

CVE-2022-29056 漏洞利用自动化（仅限教育目的）🚨 📌 描述 这是一个带有图形界面（Tkinter）的 Python 脚本，允许用户向登录端点自动发送测试请求。其目的是模拟服务器对不同负载大小的响应，并分析潜在漏洞。 ⚠️ 此代码严格用于教育目的和学习。不当使用可能违法并违反安全政策。作者不对任何不当使用负责。 🛠 功能 ✅ 允许输入目标 IP 并设定负载大小。 ✅ 向 /logincheck 端点自动发送请求。 ✅ 提供“开始”和“停止”按钮以控制测试。 ✅ 使用线程并行运行，避免界面卡死。 ✅ 在开始前验证 IP 是否有效。 📋 安装与使用 🔧 先决条件 已安装 Pytho...

CVE-2018-6389

doser.py 用于HTTP请求的DoS工具（灵感来自Hulk，但功能更多），使用Python编写： 示例 999个线程发送GET请求： python doser.py -t 999 -g 'https://targeted.site.com' 999个线程发送带有JSON数据的POST请求： python doser.py -t 999 -p 'https://targeted.site.com' -ah 'Content-Type: application/json' -d '"json": "payload"' 用法 usage: doser.py -h -g G -p P -d...

probequest

ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Kit de herramientas que permite capturar y mostrar las solicitudes de sonda probe requests Wi‑Fi que pasan cerca de su interfaz inalámbrica. Las solicitudes de sonda...

ReverseHttp

ReverseHttp Backdoor en Python que se comunica mediante solicitudes HTTP POST/GET Requisitos Python 2.7 Cherrypy pip install cherrypy Requests pip install requests Uso: Ejecuta el script del listener, luego el controlador, luego envía el archivo backdoor y espera conexiones. Captura de pantalla...

CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Aviso de exención de responsabilidad: Este script se proporciona 'tal cual' y exclusivamente con fines educativos. Se recomienda encarecidamente a los usuarios que actúen con cautela y lo utilicen dentro de los límites de las consideraciones legales y éticas...

CVE-2023-26208

CVE-2023-26208 Exploit Automation Con Fines Educativos 🚨 📌 Descripción Este es un script de Python con interfaz gráfica Tkinter que permite al usuario probar el envío de peticiones automatizadas a un endpoint de inicio de sesión. El objetivo es simular cómo los servidores responden a diferentes...

CVE-2025-70516

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

Snoopy

| || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "Amy, la tecnología no es intrínsecamente buena ni mala. Depende de cómo se use. Como el Rayo de la Muerte." -Profesor Farnsworth Bienvenido a...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...