dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: Значок pip-rating .. image::...

CVE-2022-1388-Exploit

CVE-2022-1388-Exploit CVE 2022-1388 F5 Big-IP를 위한 테스트 및 익스플로잇 스크립트 masscheck.py는 파일 입력을 받아 호스트를 익스플로잇하지 않고 취약한지 확인합니다. 탐지: /mgmt/tm/util/bash 엔드포인트를 스캔하면 웹 서버 로그에 나타날 가능성이 높습니다. 또는 F5를 사용 중이라면 패치를 적용하세요. 영향을 받는 버전은 아래에 나와 있으며, 패치는 https://support.f5.com/csp/article/K23605346 에서 확인할 수 있습니다. 취약한 버전...

@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

Summary renders a rich-text AST into the DOM and, for a nodes, assigns the node's URL straight to the anchor's href with no scheme check. A link authored in the CMS as javascript:… renders as a live javascript: anchor, so a visitor who clicks it executes attacker-supplied script in the site's...

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

fockcache

fockcache FockCache - Минимизированное тестирование отравления кэша Подробнее об отравлении кэша: https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache пытается выполнить отравление кэша, перебирая заголовки X-Forwarded-Host и X-Forwarded-Scheme на веб-страницах. Посл...

CVE-2019-8978

CVE-2019-8978 Ellucian Banner Web Tailor 및 Banner Enterprise Identity Services에서의 부적절한 인증 CWE-287 작성자: Katie Mulliken [email protected] 감사: Carnegie Mellon University CERT Coordination Center 정보 발견일: 2018년 12월 17일 공급업체: Ellucian Company L.P. 공급업체 홈페이지: https://www.ellucian.com 제품: Banner Web...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

patch-checker

PatchChecker Это кодовая база сервиса, работающего на: https://patchchecker.com. Короче говоря, PatchChecker — это веб-приложение работающее на Flask, которое предоставляет вывод, аналогичный Watson. Однако использование PatchChecker не требует выполнения бинарного файла на целевой машине. В этот...

Dorkify

Выполните поиск Google Dork с помощью Dorkify Google Dorking Google Dorking — это хакерская техника, использующая поиск Google для поиска уязвимостей в конфигурации и программном коде, используемом веб-сайтами. Google Dorking включает использование расширенных операторов в поисковой системе Googl...

skf-flask

СТАРЫЙ и архивный Security Knowledge Framework Обратите внимание, что это архивная версия SKF, мы заняты созданием нового Security Knowledge Framework. Для получения обновлений посетите этот репозиторий GitHub: https://github.com/Security-Knowledge-Framework/Platform...

WS-Attacker

WS-Attacker WS-Attacker — это модульный фреймворк для тестирования проникновения веб-сервисов. Он разработан кафедрой сетевой безопасности и безопасности данных Рурского университета Бохума https://nds.rub.de/ и компанией Hackmanit GmbH https://hackmanit.de/. Основная идея WS-Attacker —...

CVE-2026-108260 @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link using a script-capabl...

CVE-2026-108260

The @tinacms/web-components package in the TinaCMS headless content management system is vulnerable to stored XSS in versions prior to 0.2.1 . The root cause is located in packages/@tinacms/web-components/src/tina-markdown.js, where the tina-markdown element assigns a node.url value directly to a...

EUVD-2026-95989

Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link using a script-capabl...

CVE-2026-108260 @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link using a script-capabl...

cve-2026-43515-poc

CVE-2026-43515 — Apache Tomcat 보안 제약 우회 악용 가능성 판정: 악용 가능 확인. 분할된 구성으로 보호되는 리소스에 대한 POST 요청이 인증을 완전히 우회합니다. 필요한 web.xml 형태는 표준 배포에서 흔하지 않습니다 — 자세한 내용은 분석을 참조하세요. 목차 개요 영향받는 버전 근본 원인 분석 저장소 구조 요구 사항 사용법 예상 출력 참조 면책 조항 개요 CVE-2026-43515는 Apache Tomcat의 보안 제약 평가 로직의 취약점입니다. 단일 가 동일한 URL 확장자 패턴예: .htm...

galah

Кратко: Galah /ɡəˈlɑː/ — произносится «гу-лаа» — это веб-ханпот на основе LLM, предназначенный для имитации различных приложений и динамического ответа на произвольные HTTP-запросы. Galah поддерживает основных LLM-провайдеров, включая OpenAI, GoogleAI, GCP Vertex AI, Anthropic, Cohere и Ollama. В...

CVE-2022-24716

CVE-2022-24716 Icinga Web 2는 컴퓨터 시스템과 네트워크를 모니터링하는 소프트웨어 애플리케이션입니다. 사용자가 시스템 리소스를 확인하고 관리할 수 있는 웹 인터페이스를 제공합니다. 그러나 Icinga Web 2에는 인증되지 않은 사용자가 웹 서버 사용자가 접근할 수 있는 시스템 파일에 접근할 수 있는 취약점이 있습니다. 여기에는 데이터베이스 자격 증명이 포함된 Icinga Web 2의 구성 파일이 포함됩니다. 이 취약점은 Icinga Web 2 버전 2.9.6 및 2.10에서 수정되었습니다. 그러나 이전 버...