GooFuzz

GooFuzz - The Power of Google Dorks 크레딧 저자: M3n0sD0n4ld 트위터: @DavidUton 설명: GooFuzz 는 Bash 스크립팅 으로 작성된 스크립트로, 고급 Google 검색 기법을 사용하여 웹 서버에 요청하지 않고 파일이나 디렉터리에서 민감한 정보를 얻습니다. 새로운 소식 버전 2.0 의 새로운 기능과 도구를 올바르게 사용하는 방법에 대해 알아보고 싶으신가요? 아래 문서를 확인하여 도구를 최대한 활용하세요. 사전 요구 사항 Bash/Zsh : 스크립트가 실행되는 주요 엔진입니다...

GitDorker

GitDorker GitDorker는 GitHub Search API와 제가 여러 소스에서 수집한 방대한 GitHub dork 목록을 활용하여 검색어가 주어졌을 때 GitHub에 저장된 민감한 정보의 개요를 제공하는 도구입니다. GitDorker의 주요 목적은 사용자에게 GitHub에서 민감한 정보를 수집하기 위한 깔끔하고 맞춤화된 공격 표면을 제공하는 것입니다. GitDorker는 GitRob 또는 Trufflehog와 같은 추가 도구와 함께 GitDorker에서 발견된 흥미로운 리포지토리나 사용자에 대해 사용하여 최상의 결...

freevulnsearch

freevulnsearch 이 NMAP NSE 스크립트는 Free OCSAF 프로젝트https://freecybersecurity.org의 일부입니다. NMAP의 버전 스캔 "-sV"와 함께 사용하면 해당 취약점이 CVECommon Vulnerabilities and Exposures를 사용하여 자동으로 할당되고, CVSSCommon Vulnerability Scoring System를 사용하여 취약점의 심각도가 할당됩니다. 더 명확하게 하기 위해 CVSS는 다음과 같이 해당 v3.0 CVSS 등급으로 할당됩니다: 심각 CVS...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

HellRaiser

HellRaiser 脆弱性スキャナー インストール HellRaiserは、cve-search APIに依存しています。cve-search APIを実行し、config/config.ymlのcvesearchapidomainフィールドにアドレスを追加してください。 ruby 2.7.2、bundler 1.17.3、railsをインストールします。 https://gorails.com/setup/ubuntu/20.04 redis-serverとnmapをインストールします。 sudo apt-get update sudo apt-get install...

XWiki - HQL Injection

XWiki is vulnerable to Hibernate Query Language HQL injection in the wiki and space search REST API starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0. The vulnerability allows attackers to inject malicious HQL queries through the orderField parameter, potential...

ChanCMS <= 3.3.0 - SQL Injection

yanyutao0402 ChanCMS = 3.3.0 contains a SQL injection caused by manipulation of the "key" argument in app/modules/api/service/Api.js Search function, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request. id: CVE-2025-10210 info: name: ChanCMS = 3.3.0 - SQL...

CVE-2026-73976 djehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`)

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the search/listing queries through three separate parameters. Because the affected queries are read SELECT queries, this does not write to the...

CVE-2026-73976 djehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`)

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the search/listing queries through three separate parameters. Because the affected queries are read SELECT queries, this does not write to the...

poc_monitor

pocmonitor CVE-2024-49112의 POC를 찾는 짧은 스크래퍼 4시간마다 스크립트를 실행하도록 cron 작업을 설정하면 업데이트가 유지됩니다. 알림은 사용자 지정할 수 있지만 Discord 웹훅을 사용하여 Discord 채널에 알림을 보냈습니다. 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py /var/log/pocmonitor/pocmonitor.log 2&1 디버그 설정 포함: cd /root/monitorscript &&...

CVE-2026-11817

In multi-organization deployments, an Org Admin in one organization could call GET /api/access-control/users/permissions/search with actionPrefix=dashboards: and obtain dashboard and folder UIDs plus per-user permission mappings from other organizations. Single-organization deployments are not...

EUVD-2026-66208

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...

CVE-2026-16640

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...

CVE-2026-16640 Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...

CVE-2026-16640

The Drupal Search API Autocomplete module (versions 0.0.0 through 1.12.0 ) is vulnerable to Reflected Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. The flaw resides in a test script accessible to anonymous users that fails to sufficiently validate ...

CVE-2026-16640 Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...

CVE-2026-16640: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...

CVE-2026-53529

LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw HTML in the frontend. A user with editor or administrator permissions could create or modify a page title containing an HTML/JavaScript payload. When another user searched for ...

EUVD-2026-64178

LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw HTML in the frontend. A user with editor or administrator permissions could create or modify a page title containing an HTML/JavaScript payload. When another user searched for ...

CVE-2026-53529: Improper Neutralization of Input During Web Page Generation

LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw HTML in the frontend. A user with editor or administrator permissions could create or modify a page title containing an HTML/JavaScript payload. When another user searched for ...