GrafXploit

Grafana CVE-2021-43798 自动化利用工具 概述 本项目是一个自动化利用工具，用于扫描并提取受 CVE-2021-43798 影响的 Grafana 实例中的敏感信息。该工具能够识别易受攻击的插件，并从受感染用户中提取 SSH 密钥。 功能特性 自动化扫描易受攻击的 Grafana 实例。 识别易受攻击的插件。 提取敏感文件，包括 SSH 密钥。 支持单个和多个目标扫描。 可自定义的扫描路径列表。 前提条件 Python 3.x 所需 Python 库：colorama 安装 1. 克隆仓库： root@kitploit: git clone...

wpscvn

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. requires : Python 3 usage ...

Grafxploit

Grafana CVE-2021-43798 自动利用工具 概述 本项目是一个自动利用工具，旨在扫描并提取存在 CVE-2021-43798 漏洞的 Grafana 实例中的敏感信息。该工具可识别存在漏洞的插件，并提取受感染用户的 SSH 密钥。 功能 自动扫描存在漏洞的 Grafana 实例。 识别存在漏洞的插件。 提取敏感文件，包括 SSH 密钥。 支持单目标和多目标扫描。 可自定义扫描路径列表。 前提条件 Python 3.x 必需的 Python 库：colorama 安装 1. 克隆仓库： root@kitploit: git clone...

PT-2026-56936

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.This issue affects GD Rating System: from n/a through = 3.7...

PT-2026-48752

Unauthenticated Cross Site Scripting XSS in Product Filter Widget for Elementor = 1.0.6 versions...

PT-2026-48751

Unauthenticated Cross Site Scripting XSS in WP Google Review Slider = 18.0 versions...

PT-2026-48750

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

PT-2026-46323

Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...

PT-2026-46333

Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...

PT-2026-46340

Unauthenticated Local File Inclusion in Especio = 1.0 versions...

PT-2026-46343

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

PT-2026-46365

Unauthenticated Local File Inclusion in Snowy = 1.13 versions...

PT-2026-46324

Unauthenticated Local File Inclusion in Rosaleen = 2.8 versions...

PT-2026-46334

Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...

PT-2026-46349

Unauthenticated Arbitrary File Deletion in Car Zone = 3.7 versions...

PT-2026-46361

Unauthenticated Local File Inclusion in Gamic = 1.15 versions...

PT-2026-46354

Unauthenticated Local File Inclusion in Gat = 1.16 versions...

PT-2026-46330

Unauthenticated Local File Inclusion in Nexio = 1.10.0 versions...

PT-2026-46351

Unauthenticated Local File Inclusion in Abelle = 1.22 versions...

PT-2026-46380

Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...