redjoust

ᵔᴥᵔ RedJoust A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron. Join the community Join the community of Kawaiipantsu / THUGSred and participate in the dev talk around Redjoust or simpl...

Gallery-Plugin-SQL-Injection

Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: Navigate to the admin panel of your...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in. !Versiongithub-version-imggithub-version-uri...

domain-to-webapp

domain-to-webapp A simple bash script for finding web application hosted within a domain Requirements curl Subfinder docker image Usage $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ / / \ ' \ / \ | ' | ' \ | || | | | | |...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

webapp-exploits

webapp-exploits Web Application Exploit Development...

Mahoraga-Webapp-Defender

Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting

Zarafa WebApp 2.0.1.47791 and earlier contains an unauthenticated reflected cross-site scripting vulnerability. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2019-7219 info: name: Zarafa WebApp =2.0.1.47791 -...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp Author: verifysecurity At least Webapp version 1.6-46049 till 2.0.1.47791 are affected. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

Trigger.dev: Cross-environment Deployment Cancel

Summary Trigger.dev isolates each project into multiple environments "dev", "staging", "prod", and per-PR "preview" branches, each with its own secret API key — the environment is a trust boundary a "dev"/preview/CI key is lower-trust than a "prod" key. Most API routes enforce this by scoping...

CVE-2026-109433

Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to an inverted comparison logic in AbstractCockpitPluginResource.isPermissionDisabled. Attackers with...

CVE-2026-109433: Incorrect Authorization

Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to an inverted comparison logic in AbstractCockpitPluginResource.isPermissionDisabled. Attackers with...

Astra Linux – Vulnerability in Chromium

Chromium: CVE-2021-30622 – Use after free in WebApp installations...

org.eclipse.jetty.demos:demo-proxy-webapp (>=10.0.0, <=10.0.26), org.eclipse.jetty.demos:demos-jetty-embedded (>=10.0.0, <=10.0.26) +4 more potentially affected by CVE-2026-18660 via org.eclipse.jetty:jetty-proxy (>=10.0.0, <=10.0.26)

org.eclipse.jetty:jetty-proxy MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.10, =5.26.1, =5.27.15 Source cves: CVE-2026-18660 Source advisory: MEND:CVE-2026-18660...

com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.3.3)

com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.22.0, <=2.22.4), org.apache.jackrabbit:jackrabbit-webapp (>=2.22.0, <=2.22.4) +5 more potentially affected by CVE-2026-92414 via org.apache.jackrabbit:jackrabbit-jcr-server (>=2.22.0, <=2.22.4)

org.apache.jackrabbit:jackrabbit-jcr-server MAVEN version =2.22.0, =2.22.0, =2.22.0, =1.66.0, =3.0.0-beta2, =4.1.0 Source cves: CVE-2026-92414 Source advisory: MEND:CVE-2026-92414...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.5-beta), org.apache.jackrabbit:jackrabbit-webapp (>=2.23.0-beta, <=2.23.5-beta) potentially affected by CVE-2026-92414 via org.apache.jackrabbit:jackrabbit-jcr-server (>=2.23.0-beta, <=2.23.5-beta)

org.apache.jackrabbit:jackrabbit-jcr-server MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.5-beta Source cves: CVE-2026-92414 Source advisory: MEND:CVE-2026-92414...