Limit Login Attempts - Stored Cross-Site Scripting

Limit Login Attempts WordPress plugin 4.0.72 contains a stored cross-site scripting caused by unsanitized and unescaped settings, letting malicious administrators inject Javascript code, exploit requires administrator privileges. id: CVE-2022-1029 info: name: Limit Login Attempts - Stored...

Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...

Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.8.1. This is due to insufficient permissions checking on the 'tptranslation' AJAX action and default settings which makes it possib...

EUVD-2026-94159

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

CVE-2026-14911

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

CVE-2026-14911

A Cross-site Scripting (XSS) vulnerability exists in ASUS router modules due to the improper neutralization of input during web page generation. A remote attacker can exploit this flaw by tricking an authenticated user into visiting a crafted URL. Successful exploitation may allow the attacker to...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

EUVD-2026-94158

A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...

CVE-2026-19396

The ASUS RT-BE57 router is vulnerable to an issue where a predictable seed in the pseudo-random number generator (PRNG) is used during IFTTT pairing token generation . This flaw allows an unauthenticated nearby user to derive the pairing token by observing values during an administrator-initiated...

CVE-2026-19396

A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...

TeamViewer-dumper-in-CPP

TeamViewer-dumper-in-CPP Извлекает ID TeamViewer, пароль и настройки учетной записи из запущенного экземпляра TeamViewer путем перечисления дочерних окон. Компиляция и требования 1. Скомпилируйте с помощью CL 2. cl TeamViewerDump.cpp 3. или с cl TeamViewerDump.cpp /EHsc 4. Требования 5. TeamViewe...

SFPolDevChk

Средство проверки отклонений политик Salesforce Опубликовано в качестве open source компанией NCC Group Plc - https://www.nccgroup.com/ Разработано Джеромом Смитом @exploresecurity Благодарность Стивену Томкинсону @neonbunny9 https://www.github.com/nccgroup/SFPolDevChk Выпущено под лицензией AGPL...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

CVE-2020-15916

GenLANConfigAttack представляет собой PoC для эксплуатации уязвимости CVE-2020-15916 , которая позволяет несанкционированно изменять конфигурацию LAN устройства. Функции Использует уязвимость конфигурации LAN Отправляет вредоносный payload для изменения настроек сети Обходит механизмы безопасност...

CVE-2019-9978

CVE-2019-9978 CVE-2019-9978 - PoC RCE в плагине Social WarFare system'cat /etc/passwd' Сохраните его с именем файла: payload.txt и загрузите его на сервер. URI должен выглядеть так: https://yoursite.com/payload.txt. Наконец, укажите ваши опции --target и --payload-uri: $ python cve-2019-9978.py...

PT-2026-107385

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

CVE-2022-32060

Snipe-IT Версия v6.0.2 Описание уязвимости: Уязвимость произвольной загрузки файлов в компоненте Update Branding Settings Snipe-IT v6.0.2 позволяет злоумышленникам выполнять произвольный код через специально созданный файл. Векторы атаки: Мы обнаружили уязвимость загрузки файлов при загрузке...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...