CVE-2022-31793

CVE-2022-31793 -u specifica IP -l specifica file IP -v modalità verifica -f specifica file da leggere python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2024-43917

CVE-2024-43917 Dieses Skript demonstriert eine SQL-Injection-Schwachstelle, die im TI WooCommerce Wishlist Plugin für WordPress bis Version 2.8.2 CVE-2024-43917 gefunden wurde. Die Schwachstelle ermöglicht es nicht authentifizierten Benutzern, beliebige SQL-Befehle auf der Datenbank der Website...

CVE-2026-80433

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

CVE-2026-80433

SureFeedback Client Site is a WordPress plugin vulnerable to Subscriber-level Sensitive Data Exposure in versions 1.2.12 and below . The CVSS 3.1 score is 7.5 (High) , with a network attack vector requiring no privileges or user interaction, and a high impact on confidentiality but no impact on i...

CVE-2026-80433 WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

CVE-2024-55457-PoC

CVE-2024-55457-PoC MasterSAM Star Gate v11 è vulnerabile a un attacco di directory traversal tramite l'endpoint /adama/adama/downloadService. Un attaccante può sfruttare questa vulnerabilità manipolando il parametro file per accedere a file arbitrari sul server, con la potenziale esposizione di...

CVE-2025-51867

CVE-2025-51867 Beschreibung der Schwachstelle Deepfiction AI ist ein KI-Unterhaltungsunternehmen mit der Mission, personalisiertes Geschichtenerzählen zu revolutionieren. Deepfiction AI stellt eine Webanwendung bereit, um Geschichten durch Chatten mit einem LLM zu erstellen. Diese ist in ihrer...

CVE-2021-43798-poc

CVE-2021-43798-poc Lettura arbitraria dei file in Grafana 8.x python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...

LLMReaper

Captura Passiva de Conversas com LLM e Pesquisa de Exposição de Dados Sensíveis Extensão Chromium MV3 • Captura de DOM em Tempo Real • Detecção de Segredos • Backend FastAPI !WARNING Este projeto é fornecido estritamente para pesquisa de segurança, uso educacional e fins de conscientização...

CVE-2023-4800

ID do CVE: CVE-2023-4800 Tipo de Vulnerabilidade: Exposição de Dados Sensíveis Descrição: O plugin DoLogin Security para WordPress é vulnerável a acesso não autorizado de dados devido à falta de uma verificação de capacidade no widget do painel em versões até a 3.7 inclusive. Isso possibilita que...

CVE-2026-48907

CVE-2026-48907 Descrição Este arquivo CVE-2025-9209.py é uma ferramenta de exploração em massa que tem como alvo a vulnerabilidade CVE-2025-9209. Funcionalidades principais: Examina uma lista de sites chamando /wp-json/wp/v2/users Analisa a resposta para procurar dados sensíveis do usuário, como...

SwaggerSpy

SwaggerSpy Panoramica SwaggerSpy è uno strumento progettato per l'Intelligence Open Source OSINT automatizzata su SwaggerHub. Questo progetto mira a semplificare il processo di raccolta di informazioni dalle API documentate su SwaggerHub, fornendo preziose intuizioni per ricercatori di sicurezza,...

github-dorks

Github Dorks Github Search ist eine ziemlich leistungsstarke und nützliche Funktion, mit der nach sensiblen Daten in Repositories gesucht werden kann. Eine Sammlung von GitHub-Dorks kann sensible persönliche und/oder organisatorische Informationen wie private Schlüssel, Anmeldeinformationen,...

CVE-2026-79030

A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-79220

CVE-2026-79220 is an information leak in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to obtain sensitive information. The vulnerability carries a CVSS 3.1 s...

CVE-2026-79666 Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints

Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions can query GET /api/system/logs and subscribe to SSE and WebSocket log streams to retrieve sensitive operational data...

CVE-2024-50961

Esposizione di Dati Sensibili CVE-2024-50961 Descrizione In DonWeb Ferozo Hosting v1.1, un attaccante remoto può sfruttare i parametri URL per accedere a dati sensibili, incluse le credenziali del database. I vettori d'attacco includono l'intercettazione di rete, i log del server e la cronologia...