CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target root@kitploit: python poc.py https://192.168.32.130 + https://192.168.32.130 is vulnerable 블로그: https://rustlang.rs/posts/simple-help/...

CVE-2020-7246

ラボのセットアップ: a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c Webサーバーは http://127.0.0.1/index.php でアクセス可能です。 d 事前設定済みアカウント: メール: [email protected] パスワード: developer1 エクスプロイト:...

tulpar

Tulpar는 웹 침투 테스트를 자동화하기 위해 작성된 오픈 소스 웹 취약점 스캐너입니다. Tulpar는 다음과 같은 기능을 제공합니다. -SQL 인젝션 GET 메소드 -XSS GET 메소드 -크롤링 -이메일 노출 -신용카드 노출 -Whois -커맨드 인젝션 GET 메소드 -디렉토리 트래버설 GET 메소드 -파일 인클루드 GET 메소드 -서버 정보 -기술 정보 -X-Content-Type 검사 -X-XSS-Protection 검사 -TCP 포트 스캐너 -robots.txt 검사 -URL 인코딩 -인증 정보 -사용 가능한 메소드...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

Open-Worldwide-Application-Security-Project-OWASP-

开放全球应用安全项目（OWASP） 使用 OWASP ZAP 对 DVWA 进行自动化 Web 漏洞评估，以识别并分析关键安全漏洞，如远程代码执行（CVE-2012-1823）。...

Stable Diffusion Webui 1.10.0 - Open Redirect

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-11044...

Webkul QloApps 1.6.0 - Cross-site Scripting

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. id: CVE-2023-36287 info: name: Webkul QloApps 1.6.0 - Cross-site Scripting author: theamanrawa...

WAVLINK WN530H4 live_api.cgi - Command Injection

A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...

WordPress Jannah Theme <5.4.4 - Cross-Site Scripting

WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page. id: CVE-2021-24364 info: name: WordPress Jannah Theme 5.4.4 - Cross-Sit...

Employee Records System 1.0 - Unauthenticated File Upload RCE

Employee Records System version 1.0 contains an unrestricted file upload vulnerability in uploadID.php that allows remote unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution. id: CVE-2021-4462 info: name: Employee Records System 1.0 - Unauthenticated File...

Episerver 7 - Blind XML External Entity Injection

Episerver 7 patch 4 and earlier contains an XML external entity XXE caused by processing crafted DTD in XML requests involving util/xmlrpc/Handler.ashx, letting remote attackers read arbitrary files, exploit requires sending malicious XML payloads. id: CVE-2017-17762 info: name: Episerver 7 - Bli...

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

exploit-writing-for-oswe

OSWEのためのエクスプロイト作成 背景 概要 このリポジトリには、OSWEのラボおよび認定試験でエクスプロイトスクリプトを作成する際に役立つ、便利なスニペットとヒントの一覧が含まれています。 ここに示す例の一部は、特定のコーディング慣行に反するかもしれませんが、最終的な目標はエクスプロイトスクリプトを迅速かつ正確に書くことです。 requestsライブラリの使用に慣れていない場合や、Pythonに不慣れな場合は、コードスニペットセクションが最適な出発点です。それ以外の場合は、再利用可能なコードセクションまたはヒントセクションに進んでください。 目的...

VulnLab

VulnLab Yavuzlar가 개발한 웹 취약점 실습 프로젝트입니다. 로고 취약점Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken Authentication Race...

BWASP

BWASP BoB Web Application Security Project BWASP는 웹 취약점 수동 분석 해커를 지원하는 오픈 소스 분석 도구입니다. BWASP 도구는 기본적으로 공격을 진행하지 않고 취약점 분석을 통해 예측 정보를 제공합니다. BWASP는 자동 분석 및 수동 분석 수행을 지원합니다. BWASP 프로젝트는 다음을 지원합니다: 공격 벡터 자동 찾기 e.g. SQL Injection, Cross-site Scripting 웹사이트 기술 탐지 Log4J 취약점 스캔 Java 언어 부분 지원 HTTP REST A...

wapiti

================================== Wapiti - Web脆弱性スキャナー .. image:: https://img.shields.io/pypi/v/wapiti3?label=PyPI&logo=PyPI&logoColor=white&color=blue :alt: PyPI version :target: https://pypi.python.org/pypi/wapiti3 .. image:: https://img.shields.io/pypi/pyversions/wapiti3 :alt: Supported Pytho...

CVE-2026-65902

A flaw was found in DOMPurify. An attacker can exploit a vulnerability in how DOMPurify handles its sanitization hooks when default configurations are used. By manipulating the uponSanitizeElement or uponSanitizeAttribute hooks, an attacker can permanently alter the allowed HTML tags and...

CVE-2026-64941

The CVE describes an Open Redirect in Phoenix.LiveView.validate_local_url!/2 where ASCII tab, LF or CR are not rejected. This allows a crafted :to value to bypass path-only validation and be resolved as a scheme-relative URL (e.g., //example.com) when using redirect/2 and related navigation funct...