134 matches found
GHunt
🌐 GHunt Online version : https://osint.industries 🐍 Now Python 3.13 compatible ! 😊 Description GHunt v2 is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible. Features : CLI usage and modules Python library...
CVE-2026-19089-WooCommerce-Tyche
CVE-2026-19089 — WooCommerce Tyche Product Input Fields Status: incomplete / work in progress. This repository is a stub. The script is not a finished PoC, is not packaged for use, and should not be treated as a complete or reliable demonstration. Abraxas Labs research notes for CVE-2026-19089 al...
CVE-2026-31013
Dovestones Softwares ADPhonebook 4.0.1.1 has a reflected cross-site scripting XSS vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of...
CVE-2026-31014
Dovestones Softwares AD Self Update 4.0.0.5 is vulnerable to Cross Site Request Forgery CSRF. The affected endpoint processes state-changing requests without requiring a CSRF token or equivalent protection. The endpoint accepts application/x-www-form-urlencoded requests, and an originally...
CVE-2026-31013
Dovestones Softwares ADPhonebook 4.0.1.1 has a reflected cross-site scripting XSS vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of...
CVE-2026-31014
Dovestones Softwares AD Self Update 4.0.0.5 is vulnerable to Cross Site Request Forgery CSRF. The affected endpoint processes state-changing requests without requiring a CSRF token or equivalent protection. The endpoint accepts application/x-www-form-urlencoded requests, and an originally...
CVE-2026-31013
Dovestones Softwares ADPhonebook <4.0.1.1 is affected by a reflected XSS in the search parameter of the /ADPhonebook?Department=HR endpoint. User input is reflected in the HTTP response without proper validation or encoding, enabling arbitrary JavaScript execution in the victim’s browser. CVSS...
CVE-2025-13835
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.20...
EUVD-2025-200072
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.19...
PT-2025-48534
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.19...
EUVD-2006-0144
Malware in sbrugna...
EUVD-2007-6636
Malware in sbrugna...
EUVD-2023-46365
Malicious code in bioql PyPI...
EUVD-2022-48264
Malicious code in bioql PyPI...
EUVD-2023-27789
Malicious code in bioql PyPI...
EUVD-2024-31322
Malicious code in bioql PyPI...
EUVD-2023-49308
Malicious code in bioql PyPI...
EUVD-2024-45848
Malicious code in bioql PyPI...