CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Falta de autorización para lectura arbitraria de archivos sin autenticar Descripción El plugin Error Log Viewer By WP Guru para WordPress es vulnerable a la lectura arbitraria de archivos en todas las versiones hasta la 1.0.1.3 inclusive, a...

lapith

Lapith Lapith es una herramienta GUI en Python que presenta los resultados de Nessus en un formato más útil para los probadores de penetración. Los resultados se pueden ver por problema en lugar de por host. Por lo tanto, es más fácil informar de todos los hosts afectados por un problema, en luga...

ncccodenavi

ncccodenavi NCC Code Navi, el visor de texto y buscador para revisores de código Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Publicado bajo AGPL,...

burp-jq

Burp JQ Esta es una extensión de Burp para aplicar consultas jq al contenido JSON del visor de mensajes HTTP. Compilación root@kitploit: $ gradle fatJar Créditos Burp JQ depende de jackson-jq, una implementación de jq en Java. jq jackson jackson-jq...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

CVE-2026-25940

CVE-2026-25940 jsPDF PoC A proof-of-concept for CVE-2026-25940 demonstrating how specially crafted AcroForm radio button appearances can trigger embedded JavaScript in vulnerable PDF viewers e.g., Foxit. The repo includes a Node-based generator and a browser viewer harness to exercise different...

WinBypass

Windows UAC Bypass | Privilege Escalation Slui File Handler Hijack LPE - Windows 8-10 SluiHijackBypass.ps1 UAC Bypass via FodHelper - Windows 10 FodhelperBypass.ps1 UAC Bypass via Event Viewer - Windows 7 EventVwrBypass.ps1 Metasploit-Framework Module bypassuacsluihijack.rb copy...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE Informe de Ciberseguridad de Estilo Consultor Evaluación profesional de vulnerabilidad para el riesgo del manejador de enlaces en visores de documentos, incluyendo análisis de impacto, remediación y estrategia de mitigación. 📍 Resumen d...

CVE-2024-10629

🛠️ GPX Viewer 익스플로잇 CVE-2024-10629 이 저장소는 WordPress용 GPX Viewer 플러그인의 개념 증명 익스플로잇을 포함합니다. 이 플러그인은 임의 파일 생성 취약점CVE-2024-10629에 취약합니다. 이 취약점을 통해 구독자 수준 이상의 인증된 공격자가 영향을 받는 사이트의 서버에 임의 파일을 생성할 수 있으며, 이로 인해 원격 코드 실행이 가능해질 수 있습니다. 📝 CVE 세부 정보 CVE ID : CVE-2024-10629 게시일 : 2024-11-13 업데이트일 : 2024-11-13...

BugHub

BugHub este es mi CVEhub Puedes obtener información sobre estos CVE viendo el pdf y las imágenes del proyecto...

CVE-2017-16524

CVE-2017-16524 Discovered by Omar Mezrag - 0xFFFFFF Affected Product Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D Vendor of Product Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Vulnerability type Unrestricted file upload vulnerability Attack Vector...

CVE-2021-34427

CVE-2021-34427 PoC para Windows de CVE-2021-34427 que afecta a Birt Viewer Probado en Birt 4.8.0 Construido con Claude Basado en la investigación aquí: https://bugs.eclipse.org/bugs/showbug.cgi?id=538142&ref=labs.watchtowr.com y https://sploitus.com/exploit?id=PACKETSTORM:170326...

BIT-JENKINS-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2022-35497

Trimble의 TM4WEB =22.2.0에서 세션 식별자 보안 구성 오류로 인해, 반사형 크로스 사이트 스크립팅을 통해 유효한 세션 쿠키를 복구할 수 있으며, 이는 외부 문서 뷰어 엔드포인트에 영향을 미칩니다. 구체적으로, 세션 유지에 사용되는 세 가지 쿠키는 UID, rstring 및 PHPSESSIONID이며, 이들 중 어느 것도 JavaScript 실행 벡터로부터 복구를 방지하는 적절한 HttpOnly 플래그가 설정되어 있지 않습니다. 1단계 : 공격자는 반사형 크로스 사이트 스크립팅 취약점 CVE-2022-35499를...

AllTools v1.7

AllTools All reasonably stable tools AccessMask - decode access mask for common object types BgInfo - WPF version of the Sysinternals BgInfo tool BITSMgr - BITS jobs manager application CLR Explorer - View .NET process information / dump file CpuStres - thread/CPU stress testing app CpuStress...

XPEViewer

PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...

mboxshell v0.7.3

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35499

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL...

CVE-2022-35499

Trimble TM4WEB (versions up to 22.2.0 ) is vulnerable to reflected cross-site scripting (XSS) in the external bill viewer endpoint (external_bill_viewer.msw), where an arbitrary parameter appended to the URL is reflected unsanitized into JavaScript in the HTTP response. A proof-of-concept is publ...