webapp-exploits

webapp-exploits Entwicklung von Webanwendungs-Exploits...

Gallery-Plugin-SQL-Injection

Exploit-Titel: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Datum: 2024-07-05 Exploit-Autor: tmrswrr Kategorie : Webapps Hersteller-Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Auf das Admin-Panel zugreifen: Navigieren Sie zum Admin-Panel...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp Autor: verifysecurity Mindestens die Webapp-Versionen 1.6-46049 bis 2.0.1.47791 sind betroffen. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

redjoust

ᵔᴥᵔ RedJoust Uno strumento webapp di ricognizione di sicurezza rapido e facile da usare, che fa OSINT, analisi e red-teaming sia in modalità passiva che attiva. Scritto in nodeJS ed Electron. Unisciti alla community Unisciti alla community di Kawaiipantsu / THUGSred e partecipa alle discussioni d...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting

Zarafa WebApp 2.0.1.47791 and earlier contains an unauthenticated reflected cross-site scripting vulnerability. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2019-7219 info: name: Zarafa WebApp =2.0.1.47791 -...

domain-to-webapp

domain-to-webapp Un semplice script bash per trovare applicazioni web ospitate all'interno di un dominio Requisiti curl Immagine Docker di Subfinder Utilizzo root@kitploit: $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ /...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in...

Mahoraga-Webapp-Defender

Mahoraga Webapp-Verteidiger KI-gestütztes reaktives Webapp-Verteidigungssystem, das entwickelt wurde, um KI-gestützten Angriffen in Echtzeit standzuhalten. Inhaltsverzeichnis Mahoraga Webapp-Verteidiger Inhaltsverzeichnis Einleitung Ziel-Website Mahoraga Defender Architektur Duale Umgebungen...

CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

ROS-20260722-73-0021

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat11: tomcat11-11.0.24-0.1.hum1 noarch tomcat11-admin-webapps-11.0.24-0.1.hum1 noarch tomcat11-common-11.0.24-0.1.hum1 noarch tomcat11-docs-webapp-11.0.24-0.1.hum1 noarch...

PYSEC-2026-685 Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

net.aequologica.neo:dagr-vebchar (0.5.2-alpha), net.aequologica.neo:dagr-web (0.5.2-alpha) +108 more potentially affected by CVE-2026-11998 via org.webjars.npm:angular (>=1.2.32, <=1.8.3)

org.webjars.npm:angular MAVEN version =1.2.32, =0.5.2, =0.5.2, =5.2.0-rc1, =5.2.0-rc1, =5.2.0-rc1, =5.2.0-rc1, =5.2.0-rc1, =0.4.0, =1.1.3 and more Source cves: CVE-2026-11998 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17458841...

Уязвимость компонента WebApp браузера Google Chrome и Microsoft Edge, позволяющая нарушителю подменить пользовательский интерфейс

Уязвимость компонента WebApp браузера Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, подменить пользовательский интерфейс с помощью специально созданной HTML-страни...

Chromium: CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...