7329 matches found
jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d
Pipeline Shared Libraries When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts DRY. A very common use case is that you have many projects that are built in the similar way. This plugin adds that functionality by...
CVE-2018-18912
🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2 demonstrating how an authenticated HTTP POST parameter can corrupt the exception handler chain. 📑 Table of Contents Why this repository exists Why thi...
ShareDoc_cve-2015-5477
ShareDoc the document I shared with others add cve-2015-5477 debug...
CVE-2025-68116
CVE-2025-68116 Author: @x0root Vulnerability: Stored Cross-Site Scripting XSS via Browser-Renderable Uploads SVG / HTML Affected Software: FileRise Note: GHSA-qrcv-vjvf-fr29 introduced a mitigation that prevented SVGs from rendering inside the FileRise web UI preview pane. This report documents a...
CVE-2019-18655
CVE-2019-18655 metasploit module. SEH based buffer overflow in file sharing wizard app v.1.5.0. CVE summary: File Sharing Wizard version 1.5.0 is affected of Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution a...
easy-file-share-7.2-exploit-CVE-2018-9059
easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' my version 'DEP' bypass my version on it Tested on Win 7 Ultimate x86...
BurpSuite-Team-Extension
BurpSuite-Team-Extension This Burpsuite plugin allows for multiple testers to share live/historical proxy requests, scope and repeater/intruder payloads with each other in real time allowing for truly collaborative web app testing. When connected to the Team Sever and in a Team Room all requests...
abusech
abusech ThreatFox is an open threat intelligence sharing platform, allowing anyone to share indicators of compromise IOCs. This repository provides a command-line tool CLI to interact with the ThreatFox API. Install and run Brew brew tap rollwagen/homebrew-tap brew install rollwagen/tap/abusech G...
CVE-2026-94544
Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unauthenticated unpublished content from an...
explo
explo explo es una herramienta simple para describir problemas de seguridad web en un formato legible por humanos y máquinas. Al definir un flujo de trabajo de solicitud/condición, explo es capaz de explotar problemas de seguridad sin necesidad de escribir un script. Esto permite compartir...
raccoon
Raccoon: Salesforce object access auditor Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Jerome Smith @exploresecurity with thanks to Viktor Gazdag @wucpi https://www.github.com/nccgroup/raccoon Released under AGPL - refer to LICENSE for more information...
Solitude
Solitude Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of evaluating user privacy within an app accessible for everyone. Important Note Prior to installing...
create_ap
NOT MAINTAINED This project is no longer maintained. Forks and continuation of this project linux-wifi-hotspot - Fork that is focused on providing GUI and improvements. linux-router - Fork that is focused on providing new features and improvements which are not limited to WiFi. Some interesting...
CVE-2025-34096
🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2, reachable through the password recovery endpoint. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and...
CVE-2025-63419
CVE-2025-63419 CrushFTP before 11.3.760 is vulnerable to HTML Injection. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitzations leading to HTML Injection. CWE CWE-79 — Improper Neutralization of Input During Web...
CVE-2023-42442
Red Team Offense and Defense: Post-Exploitation Process Sharing for JumpServer Unauthorized Access Vulnerability CVE-2023-42442 Usage: go run CVE-2023-42442.go --url http://192.168.123.120 For details, see the WeChat public account article: https://mp.weixin.qq.com/s/NCSnTsOMxslmf5S6d9896A...
CVE-2026-103858 MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions
MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only verified whether the target thread was restricted to a single organization org-only distribution. It did not enforce...
Pentagon breach exposes Social Security numbers and military records of millions
The US government is alerting millions of people that their personal information was stolen during a breach of the Pentagon’s personnel records at the Defense Manpower Data Center DMDC. The DMDC is a central US Department of Defense DoD organization that manages personnel records, ID credentials,...
WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Muhamad Visat in WordPress Plugin Social Media & Share Icons versions = 3.0.1...
CVE-2026-103659
MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...