redjoust

ᵔᴥᵔ RedJoust Un outil de reconnaissance de sécurité web rapide et facile à utiliser, qui effectue de l'OSINT, de l'analyse et du red-teaming en mode passif et actif. Écrit en nodeJS et Electron. Rejoignez la communauté Rejoignez la communauté de Kawaiipantsu / THUGSred et participez aux discussio...

Mahoraga-Webapp-Defender

Mahoraga Webapp Defender Système de défense d'application Web réactif alimenté par l'IA, conçu pour résister aux piratages par IA en temps réel. Table des matières Mahoraga Webapp Defender Table des matières Introduction Site Web cible Architecture du défenseur Mahoraga Double environnement...

domain-to-webapp

domain-to-webapp Простой bash-скрипт для поиска веб-приложений, размещённых в домене Требования curl Образ Docker Subfinder Использование root@kitploit: $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ / / \ ' \ / \ | ' | '...

Gallery-Plugin-SQL-Injection

Название эксплойта: SQL-инъекция в плагине Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin Дата: 2024-07-05 Автор эксплойта: tmrswrr Категория : Webapps Домашняя страница вендора: https://total-soft.com/wp-video-gallery/ Версия 2.3.6 1. Доступ к панели администратора: Перейдите...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting

Zarafa WebApp 2.0.1.47791 and earlier contains an unauthenticated reflected cross-site scripting vulnerability. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2019-7219 info: name: Zarafa WebApp =2.0.1.47791 -...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in...

CVE-2026-85022

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

EUVD-2026-70298

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

CVE-2026-85022

A cross-site scripting (XSS) vulnerability affects the WebApp Sign-In component of langgenius dify 1.13.0 , specifically in the router.replace function within web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx. Manipulating the redirect_url argument enables remote attackers...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp Auteur: verifysecurity Au moins la version 1.6-46049 jusqu'à 2.0.1.47791 de Webapp sont affectées. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

webapp-exploits

webapp-exploits Разработка эксплойтов для веб-приложений...

Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.59security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...

Astra Linux – Vulnerability in Chromium

Chromium: CVE-2021-30622 – Use after free in WebApp installations...

CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...