github-dorks

Github Dorks Поиск на GitHub — это довольно мощная и полезная функция, которую можно использовать для поиска конфиденциальных данных в репозиториях. Коллекция dork-запросов для GitHub может раскрыть конфиденциальную личную и/или организационную информацию, такую как закрытые ключи, учётные данные...

CVE-2026-48907

CVE-2026-48907 Описание Файл CVE-2025-9209.py — это инструмент для массовой эксплуатации, нацеленный на уязвимость CVE-2025-9209. Основные функции: Сканирует список сайтов через вызов /wp-json/wp/v2/users Анализирует ответ для поиска конфиденциальных данных пользователей, таких как открытые и...

CVE-2024-50961

機密データの露出 CVE-2024-50961 説明 DonWeb Ferozo Hosting v1.1では、リモート攻撃者がURLパラメータを悪用して、データベース認証情報を含む機密データにアクセスできます。攻撃ベクトルには、ネットワークスニッフィング、サーバーログ、ブラウザ履歴が含まれ、組織に重大なセキュリティ侵害やデータ保護違反をもたらす可能性があります。HTTPSによる保護と安全なログ実践が不可欠です。 攻撃の複雑さ 低 必要な権限 なし 認証されていないリモート攻撃者がこの脆弱性を悪用できます。 ユーザー操作 不要 影響を受けるコンポーネント URLパラメータの処理 :...

CNVD-2022-27366__CVE-2023-37621

CVE ID CVE-2023-37621 PRODUCT Fronius Fronius Datalogger Web 2.0.5-4 VERSION Fronius Fronius Datalogger Web 2.0.5-4 PROBLEM TYPE Unauthorized access vulnerability DESCRIPTION Fronius is a European welding machine manufacturer. Unauthorized access to Fronius Datalogger Web allows attackers to gain...

SwaggerSpy

SwaggerSpy Обзор SwaggerSpy — это инструмент, предназначенный для автоматизированного сбора разведывательных данных из открытых источников OSINT на SwaggerHub. Этот проект направлен на оптимизацию процесса сбора данных об API, задокументированных на SwaggerHub, предоставляя ценную информацию для...

CVE-2020-29134

Totvs Fluig 플랫폼 root@kitploit: Fluig는 ERP 시스템 및 회사의 다른 시스템과 통합되어 사용자와 팀이 일하는 방식을 혁신하는 생산성 및 협업 플랫폼입니다. CVE-2020-29134 root@kitploit: TOTVS Fluig 플랫폼은 base64로 인코딩된 매개변수를 통한 경로 탐색을 허용합니다. 이 취약점이 악용되면 데이터베이스에 접근하기 위한 데이터가 포함된 민감한 XML 파일을 읽을 수 있으며, 경우에 따라 LDAP 연결 및 ERP 시스템 통합 데이터도 읽을 수 있습니다. 또한...

Gravity SMTP WordPress Plugin - Sensitive Information Exposure

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. id:...

ListingPro < 2.6.1 - Sensitive Data Disclosure

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...

Joomla! Component Music Manager - Local File Inclusion

A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. id: CVE-2010-2857 info: name: Joomla! Component Music Manager - Local Fil...

DedeCMS 5.7.109 - Server-Side Request Forgery

Manipulation of the rssurl parameter in codo.php leads to server-side request forgery in DedeCMS version 5.7.109. id: CVE-2023-3578 info: name: DedeCMS 5.7.109 - Server-Side Request Forgery author: ritikchaddha severity: critical description: | Manipulation of the rssurl parameter in codo.php lea...

TrakSYS 11.x.x - Sensitive Data Exposure

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...

Scoold < 1.64.0 - Authentication Bypass

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...

Easy Appointments <= 3.12.21 - Information Disclosure

Easy Appointments WordPress plugin = 3.12.21 contains a sensitive information exposure caused by an unauthenticated REST API endpoint /wp-json/wp/v2/eablocks/eaappointments/ registered with permissioncallback allowing unrestricted access, letting unauthenticated attackers extract sensitive custom...

WordPress JobWP Plugin <= 2.3.9 - SQL Injection

The JobWP - Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwpuploadresume' parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure

The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code id: CVE-2023-6065 info: name: Quttera Web Malware Scanner = 3.4.1.48 - Sensitive Data Exposure...

Netgear R6850 - Information Disclosure

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

LLMReaper

被动式 LLM 对话捕获与敏感数据泄露研究 Chromium MV3 扩展 • 实时 DOM 捕获 • 机密检测 • FastAPI 后端 !WARNING 本项目严格仅用于安全研究、教育用途和防御意识培养。 未经明确许可，针对系统、用户或环境进行未经授权的部署可能违反当地法律、法规、组织政策或服务条款。 概述 LLMReaper 是一个 概念验证 安全研究项目，演示了具有标准 DOM 访问权限的浏览器扩展如何在没有特殊权限、网络拦截或权限提升的情况下，静默观察、捕获并扫描 AI 平台对话中意外暴露的敏感数据。...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2025-51867

CVE-2025-51867 Описание уязвимости Deepfiction AI — это компания в сфере ИИ-развлечений, миссия которой — произвести революцию в персонализированном повествовании. Deepfiction AI предоставляет веб-приложение для создания историй с помощью общения с LLM, которое уязвимо для Небезопасной прямой...