rbuster

Rbuster 另一个目录爆破工具 常用命令行选项 -a - 指定发送请求时使用的用户代理字符串 -c - 指定可能需要的任何 cookie（模拟认证）。header。 -f - 强制处理存在通配符结果的域名。 -l - 显示响应的长度。 -r - 跟随重定向。 -s - 逗号分隔的状态码列表，视为"正向"结果（默认：200,204,301,302,307）。 -u - 完整 URL（包含协议），或基础域名。 -v - 详细输出（显示所有结果）。 -w - 用于暴力破解的字典文件路径。 -b - 通过 Bearer token 进行 HTTP 授权。 -P - HTTP...

leaky-paths

Acerca de Una colección de rutas especiales vinculadas a los principales frameworks web y proyectos de infraestructura, APIs conocidas que revelan información sensible, configuraciones incorrectas, etc. Estas se pueden usar para el descubrimiento de contenido web como la forma más rápida de...

Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated attacker may bypass the fix in CVE-2026-34197 by adding a connector using an HTTP Discovery transport...

CVE-2026-40466

CVE-2026-40466 affects Apache ActiveMQ components (Broker, All, and ActiveMQ) with vulnerable versions prior to 5.19.6 and 6.0.0–6.2.4/6.2.5 before patch. The issue is due to improper input validation and code injection: an authenticated attacker can bypass CVE-34197 by adding a network connector...

Linux Distros Unpatched Vulnerability : CVE-2026-40466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ...

WPProbe Plugin Enumeration Tool 0.11.2

A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...

pagodo

This is an offensive tool for web application discovery. The primary CVE ID is not present in the provided context. The target product/service or framework is Google Search, and the vulnerability class/vector is not explicitly stated. The probable entry points are scripts/modules such as...

Malicious code in web-discovery-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167dd7dbe2205334bd9500860fec39ff616c4093fca507357c6a1e7c2b6ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7067 Malicious code in web-discovery-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167dd7dbe2205334bd9500860fec39ff616c4093fca507357c6a1e7c2b6ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...