rayhunter

Rayhunter Rayhunter è un progetto per rilevare gli IMSI catcher, noti anche come simulatori di stazione base cellulare o stingray. È stato inizialmente progettato per funzionare su un hotspot mobile economico chiamato Orbic RC400L, ma grazie agli sforzi della comunità, può supportare anche altri...

hackazon

Hackazon Hackazon é um site de teste vulnerável gratuito, uma loja virtual construída com as mesmas tecnologias usadas nos aplicativos modernos ricos e móveis. O Hackazon possui uma interface AJAX, workflows rigorosos e APIs RESTful usadas por um aplicativo móvel complementar, fornecendo um...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2025-0133

Beschreibung: Es handelt sich um einen POC für CVE-2025-0133, der nur auf PAN-OS-Firewall-Konfigurationen mit einem aktivierten GlobalProtect-Gateway oder -Portal anwendbar ist. Es prüft mit einer benutzerdefinierten Threadanzahl die Schwachstelle auf mehreren URLs, die aus einer Datei eingelesen...

CVE-2026-82090

Pocket for Android (versions through 8.33.0.0 ) is affected by a Cross-Site Scripting (XSS) vulnerability rated CVSS 4.0 9.2 (CRITICAL) . The root cause is that the "Save to Pocket" feature injects external HTML into the DOM, allowing injected JavaScript to alter the application state via native ...

EUVD-2026-67403

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-30691

CVE-2026-30691 - Avviso di vulnerabilità Dettagli ufficiali del record di vulnerabilità MITRE e documentazione tecnica per CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggerita descrizione Vulnerabilità di Cross-Site Scripting XSS in @cyntler/react-doc-viewer...

ransomwatch

RansomWatch RansomWatch è uno strumento di monitoraggio dei siti di fuga di dati ransomware. Scansiona tutte le voci presenti su vari siti di fuga ransomware, memorizza i dati in un database SQLite e invia notifiche tramite Slack o Discord quando compare una nuova vittima o quando una vittima vie...

CVE-2024-34312

CVE-2024-34312 Beschreibung Im Virtual Programming Lab für Moodle bis Version 4.2.3 wurde eine Cross-Site Scripting XSS -Sicherheitslücke in der IDE-Komponente entdeckt. Weitere Details Der Browser verbindet sich direkt mit einem Websocket, der auf dem Jail-Server läuft. Durch den Websocket kann...

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Prova di concetto: CVE-2024-42008 e CVE-2024-42010 Questa prova di concetto PoC dimostra lo sfruttamento di due vulnerabilità in Roundcube Webmail che consentono l'iniezione CSS e il cross-site scripting XSS. L'attacco consiste in due fasi: 1. XSS tramite allegato XML malevolo CVE-2024-42008 A...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to XSS vulnerability EBICS server (CVE-2025-14504)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability Vulnerability Details CVEID:CVE-2025-14504 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 through 6.2.1.11, and...

CSPTPlayground

Playground de Path Traversal no Lado do Cliente !Doyensec Research...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to XSS security vulnerability in the dashboard UI (CVE-2023-40693)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the XSS security vulnerability Vulnerability Details CVEID:CVE-2023-40693 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, and 6.2.0.0 through 6.2.0.51, 6.2.1.0 through...

CVE-2023-36159

CVE-2023-36159 sourcecodester Lost and Found Information System 1.0 में क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता मौजूद है, जो दूरस्थ हमलावरों को Create User पृष्ठ पर First Name, Middle Name और Last Name फ़ील्ड के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है।...

CVE-2023-36158

CVE-2023-36158 Cross-Site-Scripting XSS-Sicherheitslücke im sourcecodester Toll Tax Management System 1.0 ermöglicht es Remote-Angreifern, beliebigen Code über die Felder 'Vorname' und 'Nachname' auf der Seite 'Mein Konto' auszuführen...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

Silent_CVE_2019_16394

CVE-2019-16394 Un semplice script POC in Python di CVE-2019-16394 Lo script è adattato per un sito francese, potresti doverlo modificare se la lingua del sito è diversa. Installazione root@kitploit: pip install -r requirements.txt Utilizzo root@kitploit: usage: cve201916394.py -h -u URL -f FILE -...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Rapporto di analisi della RCE di Drupal RCE di Drupal CVE-2018-7600 Non dimenticare di inserire il tuo indirizzo nello script! Descrizione: Esiste una vulnerabilità di esecuzione remota del codice in diversi sottosistemi di Drupal 7.x e 8.x. Ciò consente potenzialmente ag...

towaos-lab-cve-2020-11023

CVE-2020-11023 - Vulnerabilidade XSS no jQuery Payloads de ataque root@kitploit: alert1 root@kitploit: Medidas de mitigação ⚠️ Importante : o uso de .html não é totalmente evitado apenas com jQuery 1. Usar o método .text ⭐️Recomendado root@kitploit: // Seguro: não é interpretado como HTML...