raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

CVE-2015-1579

CVE-2015-1579 - WP Revslider AFD 漏洞利用：Wordpress Slider Revolution Responsive = 4.1.4： 漏洞日期：24/07/2014 漏洞利用作者：anarc0der 版本：Wordpress Slider Revolution Responsive = 4.1.4 CVE：CVE-2015-1579 使用方法： python3 xpl.py --url='target' 目标示例 PoC（请勿攻击它们，仅供他人作为示例参考）： http://leyendahotel.com/...

CVE-2022-46604-Responsive-File-Manager

CVE 2022 46604 – 响应式文件管理器 ⚠️ 免责声明 本仓库仅供教育和研究目的使用。 此处提供的信息和代码只可用于受控环境，例如私有实验室机器。 未经授权对你不拥有或未获明确许可测试的系统使用此代码是非法且不道德的。 作者不对因使用此材料而导致的任何滥用或损害负责。 🔍 关于漏洞 CVE 2022 46604 是在 响应式文件管理器 中发现的一个漏洞，该插件是一个经常集成到 Web 应用程序和内容管理系统中的文件管理插件。该漏洞存在于 9.13.4 版本 中，由于对 path 参数的输入验证不足，未经认证的用户可以执行目录遍历 并访问服务器上的敏感文件。 根据...

rainmap-lite

rainmap-lite Rainmap Lite - 响应式Web应用，允许用户从手机/平板/浏览器启动Nmap扫描！ 与其前身1不同，Rainmap-lite不需要特殊服务（RabbitMQ、PostgreSQL、Celery、supervisor等），因此可以轻松安装在任何服务器上。你只需安装Django应用并添加cron轮询任务即可设置新的扫描服务器。随时随地都能进行Nmap扫描！ 1 Rainmap - https://nmap.org/rainmap/ 特性 只需几次点击即可轻松启动Nmap扫描。 响应式界面，在手机/平板上流畅运行。 报告通过电子邮件以所有格式发送。...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. 不是主分支 ⚠️ Github 项目 : https://github.com/trippo/ResponsiveFilemanager 要求：无要求，该利用无需认证。 Responsive Filemanager 应用程序是一个基于 Web 的文件管理工具，用于处理服务器上的文件。此漏洞（CVE-2020-10567）允许攻击者利用 ajaxcalls.php?action=saveimg 中不当的输入验证来执行任意文件上传，从而导致在目标系统上远程执行代码。...

CVE-2022-44276-PoC

CVE-2022-44276-PoC Responsive Filemanager 。但我们可以耍个小技巧：函数 getextensionfrommime 是基于文件的前几个字符工作的。所以，如果我们用几个 'a' 字符开始我们的载荷，它会被检测为 txt 类型。 如何利用 1. 使用Burp Suite拦截上传请求 2. 将文件名改为 shell.php...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v9.9.5 存在 CVE-2022-46604（文件创建扩展名绕过，可导致远程代码执行）漏洞。 当前漏洞利用程序使用 Python 3 编写，通过上传 WebShell 来利用该漏洞，从而在目标主机上远程执行命令。 参考 Exploit Database Exploit-DB: https://www.exploit-db.com/exploits/51251 Packet Storm Security:...

Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass

The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the wplogin parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This...

WordPress ARPrice <3.6.1 - SQL Injection

WordPress ARPrice plugin prior to 3.6.1 contains a SQL injection vulnerability. It fails to properly sanitize and escape user supplied POST data before being inserted in an SQL statement and executed via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

WP Responsive Images <= 1.0 - Arbitrary File Read

WP Responsive Images plugin for WordPress = 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server. id: CVE-2026-1557 info: name: WP Responsive Images = 1.0 - Arbitrary File Read author: Shivam...

Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access

Bookly WordPress plugin = 28.1 contains an insecure direct object reference caused by missing validation on 'conversationid' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication. id: CVE-2026-89063 info: name:...

WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read

WordPress Responsive Vector Maps 6.4.2 contains an arbitrary file read vulnerability because the plugin does not have proper authorization and validation of the rvmuploadregionsfilepath parameter in the rvmimportregions AJAX action, allowing any authenticated user to read arbitrary files on the w...

Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

CVE-2026-88854

CVE-2026-88854 — OrdaSoft Joomla Gallery SQL 注入 针对 Joomla 的 OrdaSoft OS Responsive Image Gallery 中 CVE-2026-88854 的 Python 3 PoC 扫描器/漏洞利用工具。 | ---|--- 组件| comosgallery, comosgallerylight 受影响版本| 1.0.0 – 6.2.6 修复版本| 6.2.7+ CVSS 4.0| 9.3 （严重） 认证| 无（公开的 modosgallerysearch） CWE| CWE-89 概述...

CVE-2026-15795

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15795 Responsive Plus <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

EUVD-2026-91953

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15795

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.5.3 . The root cause is insufficient input sanitization and output escaping within Shortcode Attributes . This flaw allows authen...