CVE-2026-19719 Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

Tentacle

Tentacle root@kitploit: .. . . .. | || || \ | | | | / \ / || | | | 1.0.0stable ---| |----| | | | | ---| |---- / ^ \ | ,----'| | | | | | | | | . | | | / /\ \ | | | | | | | | | | | |\ | | | / \ | ----.| ----.| | || |||| | || // \ ||||| http://www.orleven.com Tentacle est un framework de...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

CVE-2024-21626

PoC уязвимости CVE-2024-21626 Полную статью с подробным объяснением читайте здесь. Связанная статья В ходе исследования CVE-2024–21626 я обнаружил уязвимость, которая была упущена в более старых версиях Docker и runC. Чтобы узнать больше о том, что я нашел, прочитайте следующую статью: «Изучение...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

wig

wig - Collecteur d'informations sur les applications Web wig est un outil de collecte d'informations sur les applications Web, capable d'identifier de nombreux systèmes de gestion de contenu CMS et autres applications administratives. La reconnaissance d'applications repose sur des sommes de...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

ServiceCheater

Анализ уязвимости повышения привилегий CVE-2020-0108 в службах переднего плана 1. Контекст уязвимости В патче AOSP за август 2020 года была раскрыта уязвимость уровня фреймворка в AMS, получившая номер CVE-2020-0108 и рейтинг High. Это логическая уязвимость в обработке служб переднего плана в AMS...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

RustHound

Cette version est uniquement compatible avecBloodHound Legacy 4.x La version compatible avecBloodHound Community Edition CE se trouve ici RustHound-CE. Sommaire Limitations Description Comment le compiler ? Avec Makefile Avec Dockerfile Avec Cargo Linux x8664 version statique Windows version...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

HouseProxy

HouseProxy Protégez vos parents du phishing, proxy HTTP conçu pour bloquer les URL de phishing. Installation root@kitploit: git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip3 install -r requeriments.txt Configuration root@kitploit: Edit etc/HouseProxy.conf to change de...

secretlint v13.0.5

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

Security Bulletin: Due to use of bootstrap, IBM License Key Server Administration and Reporting Tool is affected by Cross-site scripting

Summary IBM License Key Server Administration and Reporting Tool uses bootstrap javascript library internally. Vulnerability Details CVEID:CVE-2025-1647 DESCRIPTION: Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

asterion-network-minotaur

Этичный аудитор сетевой безопасности — более 50 проверок SMB, RDP, LDAP, SSH, Kerberos и других протоколов, с анализом CVE на базе ИИ и сопоставлением с OWASP/CIS/NIST. Быстрый старт · Документация · Docker · Возможности ИИ · Отметить на GitHub В действии !Asterion — реальный вывод...