rayhunter

Rayhunter Rayhunter ist ein Projekt zur Erkennung von IMSI-Catchern, auch bekannt als Funkzellensimulatoren oder Stingrays. Es wurde ursprünglich für den Betrieb auf einem günstigen mobilen Hotspot namens Orbic RC400L entwickelt, kann aber dank der Bemühungen der Community auch einige andere Gerä...

CVE-2024-31835

CVE-2024-31835 Cross-Site-Scripting-Schwachstelle in flatpress CMS Flatpress v1.3 ermöglicht einem entfernten Angreifer die Ausführung von beliebigem Code über eine präparierte Nutzlast im Dateinamen-Parameter. Betroffene Komponente: FlatPress CMS Admin-Bereich Datei-Upload-Feld Behobene Version:...

CVE-2024-48652

CVE-2024-48652 Vulnerabilità di Cross Site Scripting in camaleon-cms v.2.7.5 consente a un attaccante remoto di eseguire codice arbitrario tramite il campo del nome del gruppo di contenuti Passaggi per la riproduzione: 1.Aprire l'URL: http://127.0.0.1/admin/dashboard 2.Accedere utilizzando le...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3 ist anfällig für Cross-Site-Scripting XSS. Ein Angreifer kann bösartigen JavaScript-Code in den Bereich „Neuen Eintrag hinzufügen“ einschleusen, wodurch er beliebigen Code im Kontext des Webbrowsers eines Opfers ausführen kann. Vulnerability Type: Cross-Site-Scripting...

CVE-2024-25411

CVE-2024-25411 Una vulnerabilità di cross-site scripting XSS in Flatpress v1.3 consente agli attaccanti di eseguire script web arbitrari o HTML tramite un payload appositamente creato iniettato nel parametro username in setup.php Tipo di vulnerabilità : Cross Site Scripting XSS Vendor del prodott...

XSSTracer

XSSTracer v1.3 von 1N3 @CrowdShield https://crowdshield.com XSSTracer ist ein kleines Python-Skript, das entfernte Webserver auf Clickjacking, Cross-Frame-Scripting, Cross-Site-Tracing und Host-Header-Injection überprüft. root@kitploit: Usage: ./xsstracer...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 Se questo progetto ti aiuta, considera di supportarlo con una donazione di $10 per farlo crescere. Link: https://rzp.io/rzp/zgkC6h5B Una piattaforma interattiva e auto-ospitata per l'addestramento su XSS con 33 sfide progressivamente più difficili — progettata per...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM Riferimenti: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

nes-vuetify-cve-2025-1461

Vuetify VCalendar XSS-Schwachstellen-POC CVE-2025-1461 Dieses Repository enthält einen Proof of Concept, der die XSS-Schwachstelle in Vuetifys VCalendar-Komponente demonstriert, insbesondere in der Prop eventMoreText. Schwachstellendetails CVE-ID : CVE-2025-1461 Betroffene Versionen : =2.0.0 3.0....

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-und-CVE-2023-24204 Einleitung In der sich ständig weiterentwickelnden Landschaft der Cybersicherheit bleiben Webanwendungen ein primäres Ziel für Angreifer, die Schwachstellen ausnutzen wollen. Kürzlich wurden zwei kritische Sicherheitslücken im SourceCodester Simple Customer...

CVE-2024-3400

CVE-2024-3400 root@kitploit: import os,base64,time systempth = "/usr/lib/python3.6/site-packages/system.pth" with opensystempth,'wb' as f: f.writeb'''import...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

xss_vulnerability_challenges

Scenari di vulnerabilità XSS sfide Questo repository è una applicazione PHP dockerizzata contenente alcune sfide di vulnerabilità XSS. Le idee alla base delle sfide sono: Bypass della validazione Javascript Bypass delle entità HTML Bypass WAF Bypass della validazione della black-list Bypass della...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Esecuzione di codice remoto tramite impostazione di sistema del file di log e avvelenamento del file di log Panoramica Recentemente ho scoperto due vulnerabilità in SuiteCRM che forniscono una catena di attacco per un utente con privilegi limitati per ottenere l'esecuzione...

shard

shard Uno strumento da riga di comando per rilevare password condivise Utilizzo Elenca le opzioni: root@kitploit: Shard 1.5 può essere eseguito in 3 modalità: 1 Singolo utente singola password - Usa -u e -p 2 Singolo utente multiple password - Usa -u e -f 3 Utenti multipli e password multiple - U...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2025-22963

Übersicht Die Cross-Site-Request-Forgery CSRF-Sicherheitslücke in Teedy-Versionen ≤ v1.11 ermöglicht es entfernten Angreifern, einen Endbenutzer dazu zu zwingen, seine Benutzerinformationen Benutzername, Passwort usw. in der Webanwendung, in der er derzeit authentifiziert ist, zu ändern...