F5-BIG-IP-CVE-2020-5902

لا يحتوي هذا المستودع على ملف README...

CVE-2023-22518

CVE-2023-22518 أداة فحص لثغرات CVE-2023-22518 وCVE-2023-22515 الحرجة في Confluence. الوصف تم تصميم هذا البرنامج النصي لفحص واستغلال الثغرات في حالات Atlassian Confluence. يتحقق من الثغرة CVE-2023-22518، ويستغل الثغرة CVE-2023-22515 لإنشاء حساب مسؤول جديد إذا كانت الحالة قابلة للاستغلال باستخدام ك...

CVE-2019-0708

لا يحتوي هذا المستودع على ملف README...

CVE-2014-0160-Chrome-Plugin

إضافة كروم لثغرة Heartbleed مهملة إضافة كروم تتحقق مما إذا كان الموقع الحالي وجميع النطاقات الفرعية المستدعاة معرّضًا لثغرة CVE-2014-0160. يتم التحقق من الثغرة عبر خدمة API لم تعد متاحة الآن لم تكن كذلك في 2014! قد يكون الكود مفيدًا لشخص ما على أي حال، إذا وجد أحدهم موفر API جديدًا لفحص heartblee...

CVE-2023-40931-POC

إثبات المفهوم PoC لـ CVE-2023-40931 🚨 يحتوي هذا المستودع على إثبات المفهوم PoC لـ CVE-2023-40931، وهي ثغرة أمنية تم تحديدها في البرنامج/النظام المتأثر. الغرض من هذا المستودع هو إظهار الثغرة لأغراض تعليمية وبحثية فقط. 🛠️ إخلاء المسؤولية ⚠️ هذا المشروع مخصص للأغراض التعليمية والاختبار المصرح به فقط...

CVE-2024-32002

CVE-2024-32002 مستودع لاختبار CVE-2024-32002 مدمج مع Hook...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

CVE-2022-0847-dirty-pipe-kernel-checker

CVE-2022-0847-dirty-pipe-kernel-checker نص برمجي بلغة Python للتحقق مما إذا كان نواتك kernel عرضة لثغرة Dirty Pipe CVE-2022-0847 يمكنك تنفيذ النص البرمجي مباشرة على نظامك وسيقوم باكتشاف إصدار نواتك ولكن يمكنك تنفيذ النص البرمجي مع تمرير إصدار نواة كوسيط للتحقق إصدار نواة من 3 أرقام، مثل 5.10.103...

springcss-cve-2014-3625

لا يحتوي هذا المستودع على ملف README...

KiviCare WordPress Plugin - Cross-Site Scripting

The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape the 'filterType' parameter, leading to Reflected Cross-Site Scripting. id: CVE-2023-2624 info: name: KiviCare WordPress Plugin - Cross-Site Scripting author: ritikchaddha severity: medium description: | The KiviCare WordPress...

ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API

changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...

Mingsoft MCMS < 5.3.1 - Cross-Site Scripting

A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotel...

Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-1780 info: name: Companion Sitemap Generator 4.5.3 - Cross-Site Scripting author:...

OPNsense - Cross-Site Scripting

A cross-site scripting XSS vulnerability in the act parameter of systemcertmanager.php in OPNsense before 23.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. id: CVE-2023-39002 info: name: OPNsense - Cross-Site Scripting author: Herry severity: medium description...

LogDash Activity Log <= 1.1.3 - SQL Injection

The LogDash Activity Log plugin for WordPress is vulnerable to SQL Injection via the username parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Essential Grid <= 3.1.0 - Cross-Site Scripting

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability in ThemePunch OHG Essential Grid plugin = 3.1.0 versions. id: CVE-2023-47684 info: name: Essential Grid = 3.1.0 - Cross-Site Scripting author: 0xpugal severity: medium description: | Unauthenticated Reflected Cross-Site Scripting XS...

Fujian Kelixin Communication - Command Injection

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this issue is some unknown functionality of the file api/client/user/pwdupdate.php. id: CVE-2024-2621 info: name: Fujian Kelixin Communication - Command...

PrestaShop 'possearchproducts' <= 1.7 - SQL Injection

In the module “Search Products” possearchproducts from PosThemes for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-30192 info: name: PrestaShop 'possearchproducts' = 1.7 - SQL Injection author: mastercho severity: critical description: | In the module “Search...

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

tagDiv Composer < 4.2 - Stored Cross-Site Scripting

tagDiv Composer plugin versions before 4.2 for WordPress are vulnerable to unauthenticated stored XSS via the /wp-json/tdw/savecss endpoint. An attacker can inject malicious JavaScript code through the compiledcss parameter, which gets stored and executed when the CSS is loaded. id: CVE-2023-3169...