CVE-2026-30502-OpenKM-6.3.12-Reflected-XSS

🛡️ CVE-2026-30502 — XSS riflesso in OpenKM v6.3.12 Scoperta e segnalata daDharmendra Kumar — Ricercatore di Sicurezza Cybersecurity | Penetration Testing | Ricerca di Vulnerabilità | Divulgazione Responsabile 📌 Sommario Panoramica Dettagli CVE Prodotto Interessato Descrizione della Vulnerabilità...

EUVD-2026-66772

LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-supplied instance and vmid GET parameters, which are reflected into the page title without adequate encoding. The paramete...

CVE-2026-45694 LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters

LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-supplied instance and vmid GET parameters, which are reflected into the page title without adequate encoding. The paramete...

CVE-2026-45694 LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters

LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-supplied instance and vmid GET parameters, which are reflected into the page title without adequate encoding. The paramete...

CVE-2026-45694 LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters

LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-supplied instance and vmid GET parameters, which are reflected into the page title without adequate encoding. The paramete...

CVE-2026-45694

LibreNMS (network monitoring system) is affected by a reflected XSS in the Proxmox application view (versions up to 26.4.0 ). The root cause is in LegacyController.php:75, where the page title is injected into a document.title JavaScript assignment via string interpolation. The instance and vmid ...

Drupal-cve-2019-6340

Pesquisa CVE 2019-6340 root@kitploit: The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any...

CVE-2020-13942

CVE-2020-13942 Execute o httpx ou httprob nos alvos antes de usar o script. USO ./CVE-2020-13942.sh target.txt Crédito Este script foi feito a partir do repositório Rohit Gautam...

CVE-2021-41277

CVE-2021-41277 Uso 1. mostrar informações de ajuda root@kitploit: /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default...

CredMaster

CredMaster Avvia un attacco di password spray / brute force tramite proxy di pass-through Amazon AWS, cambiando l'indirizzo IP richiedente per ogni tentativo di autenticazione. Questo crea dinamicamente API FireProx per spray di password più elusivi. Un ringraziamento a @ustayready per i suoi...

bluewall

BLUEWALL Bluewall è un framework per firewall progettato per professionisti cyber offensivi e difensivi. Questo framework consente ai professionisti della cybersecurity di configurare rapidamente il proprio ambiente rimanendo entro il proprio scope. Crediti Ispirato dallo script di generazione...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Prova de Conceito PoC Descrição Este script verifica a vulnerabilidade CVE-2024-9466 acrescentando /home/userSpace/devices/debug.txt a uma lista de URLs ou endereços IP de destino. Ele determina se o alvo é vulnerável com base no código de status da resposta HTTP e se ...

recon

项目已迁移到monorepo。更多信息请参见 https://github.com/pownjs/pown。 Recon Recon是一个基于知识图谱的目标侦察框架。使用知识图谱而不是平面表格表示可以更容易地发现不同类型信息之间的关系，这在许多情况下非常有用。知识图谱算法还有助于差异化、搜索、查找最短路径，以及许多其他有助于信息发现和情报收集的任务。 致谢 此工具是 secapps.com 开源计划的一部分。 / |/| /\ | \ /| \ | / | // |/// | | | |/ https://secapps.com root@kitploit: 注意：Recon 几乎是直接...

AceLdr

AceLdr - Evita gli Scanner di Memoria Un caricatore riflessivo indipendente dalla posizione per Cobalt Strike. Zero risultati da Hunt-Sleeping-Beacons, BeaconHunter, BeaconEye, Patriot, Moneta, PE-sieve, o MalMemDetect. Caratteristiche Facile da Usare Importa un singolo script CNA prima di genera...

sandfly-entropyscan

Cos'è sandfly-entropyscan? sandfly-entropyscan è un'utilità per scansionare rapidamente file o processi in esecuzione e riportare la loro entropia misura di casualità e se sono eseguibili di tipo ELF Linux/Unix. Alcuni malware per Linux sono impacchettati o crittografati e mostrano un'entropia...

Tyr

Tyr Email peer-to-peer sulla rete Yggdrasil. Inglese | Русский Screenshot | | | ---|---|---|--- | | | Cos'è Tyr? Tyr esegue un server di posta comple...

DorXNG

DorXNG 🔎🌎 DorXNG è una soluzione moderna per raccogliere dati OSINT utilizzando operatori di ricerca avanzati attraverso molteplici provider di ricerca upstream. Nel backend sfrutta un'immagine containerizzata appositamente costruita di SearXNG, un meta-motore di ricerca self-hosted, hackable e...

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Riepilogo del progetto MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Panoramica È stato creato un progetto professionale e completo per compromettere i dispositivi MikroTik RouterOS 6.49.18, che include tutti i componenti richiesti con un'interfaccia araba comple...

cve-2019-17240

Bludit = 3.9.22 - تجاوز تخفيف القوة العمياء هذا مشروع صغير قمت فيه بإعادة كتابة هذا السكربت بلغة بايثون إلى لغة غو. كان الغرض من هذا المشروع هو تعلّم لغة غو وفهم كيفية عمل هذا الاستغلال. الاستخدام root@kitploit: $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of ./brutepass: -c...

CVE-2023-46998

Cross Site Scripting في Bootbox.js الإصدارات 3.2 حتى 6.0 تسمح لمهاجم عن بُعد بحقن كود HTML وتنفيذ JavaScript تعسفي. الملخص البائع: BootBox المنتج: bootbox.js الإصدارات المتأثرة: 3.2 إلى 6.0 الاسم الرمزي: Venga-Que-Si-Es-Pa-Eso الثغرة النوع: تحييد غير صحيح للمدخلات أثناء توليد صفحة الويب 'Cross-si...