leaky-paths

About A collection of special paths linked to major web frameworks and infrastructure projects, known juicy APIs, misconfigurations.. etc. These could be used for web-content discovery as the fastest way to find quick wins. Goal With the goal of providing the community with high-quality wordlists...

rbuster

Rbuster otro rastreador de directorios Opciones comunes de línea de comandos -a - especificar una cadena de agente de usuario para enviar en la solicitud -c - usar esto para especificar cualquier cookie que pueda necesitar simulando autenticación. encabezado. -f - forzar el procesamiento de un...

Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated attacker may bypass the fix in CVE-2026-34197 by adding a connector using an HTTP Discovery transport...

CVE-2026-40466

Apache ActiveMQ Broker , ActiveMQ All , and ActiveMQ are vulnerable to Code Injection via improper input validation. An authenticated attacker can bypass the fix for CVE-2026-34197 by adding a connector through Jolokia using an HTTP Discovery transport (if the activemq-http module is on the class...

Linux Distros Unpatched Vulnerability : CVE-2026-40466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ...

WPProbe Plugin Enumeration Tool 0.11.2

A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...

pagodo

This is an offensive tool for web application discovery. The primary CVE ID is not present in the provided context. The target product/service or framework is Google Search, and the vulnerability class/vector is not explicitly stated. The probable entry points are scripts/modules such as...

Malicious code in web-discovery-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167dd7dbe2205334bd9500860fec39ff616c4093fca507357c6a1e7c2b6ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7067 Malicious code in web-discovery-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167dd7dbe2205334bd9500860fec39ff616c4093fca507357c6a1e7c2b6ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...