htbenum

htbenum A Linux enumeration script for Hack The Box This script is designed for use in situations where you do not have internet access on a Linux host and would like to run enumeration and exploit suggestion scripts, such as Hack The Box. I find myself running a similar set of scripts when I get...

linux-exploit-suggester

linux-exploit-suggester...

linux-exploit-suggester-2

This repository does not have a README...

Linux_Exploit_Suggester

LinuxExploitSuggester Linux Exploit Suggester؛ أداة اقتراح استغلالات Linux استنادًا إلى رقم إصدار نظام التشغيل. عند تشغيل هذا البرنامج بدون وسائط، سينفّذ الأمر 'uname -r' للحصول على رقم إصدار نظام التشغيل Linux، ثم يعرض قائمة مقترحة بالاستغلالات المحتملة. لا شيء معقد؛ لذا فإن أي تصحيح مطبّق أو...

Watson

Watson Watson es una herramienta .NET diseñada para enumerar KBs faltantes y sugerir exploits para vulnerabilidades de escalada de privilegios. Versiones compatibles Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Servidor 2016 y 2019 Uso root@kitploit: C:\ Watson.exe / / /\...

CVE-2026-81167

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Address Suggestion allows Cross-Site Scripting XSS. This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25...

Windows-Exploit-Suggester-Python3

Windows-Exploit-Suggester-Python3 python3 windows-exploit-suggester.py --update libreoffice --headless --convert-to xls 2021-07-15-mssb.xlsx python3 windows-exploit-suggester.py --database 2021-07-15-mssb.xls --systeminfo systeminfo.txt Example : so we should convert xlsx to xls...

CVE-2026-81167

Drupal Address Suggestion (a contributed module providing address autocomplete via configured providers) is affected by a cross-site scripting (XSS) vulnerability in versions 0.0.0 through 1.0.25 . The module fails to sufficiently sanitize address suggestion data returned by configured providers....

EUVD-2026-70008

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Address Suggestion allows Cross-Site Scripting XSS. This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25...

CVE-2026-81167 Address Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Address Suggestion allows Cross-Site Scripting XSS. This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25...

CVE-2026-81277

Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...

CVE-2026-81277

Contributor-level SQL Injection vulnerability affects the Suggestion Engine for WooCommerce WordPress plugin in versions

EUVD-2026-66954

Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...

CVE-2026-81277 WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability

Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...

WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability

SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin Suggestion Engine for WooCommerce versions = 2.0.11...

DRUPAL-CONTRIB-2026-103

The Address Suggestion module provides address autocomplete functionality using configured address providers. The module doesn't sufficiently sanitize address suggestion data returned by configured providers, which can lead to a cross-site scripting XSS vulnerability. This vulnerability is...

Address Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103

The Address Suggestion module provides address autocomplete functionality using configured address providers. The module doesn't sufficiently sanitize address suggestion data returned by configured providers, which can lead to a cross-site scripting XSS vulnerability. This vulnerability is...

PT-2026-82370

Name of the Vulnerable Software and Affected Versions Drupal Address Suggestion versions 0.0.0 through 1.0.25 Description Improper neutralization of input during web page generation allows for Cross-Site Scripting XSS. The Address Suggestion module, which provides address autocomplete functionali...

CVE-2026-54505 TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner

TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.suggestionText through client/src/i18n/TranslationContext.tsx and renders the result with dangerouslySetInnerHTML in...

CVE-2026-41921

Koha before 26.05.02, 25.11.07, and 25.05.13 contains a stored cross-site scripting vulnerability in the purchase suggestion handler that allows authenticated staff users to inject malicious scripts by submitting unsanitized input through the suggestion save operation. Attackers can supply crafte...