CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 allows directory traversal in the website component Type de vulnérabilité Traversée de répertoire Fournisseur du produit Stakater Code base du produit affecté Forecastle = v1.0.144 Composant affecté Composants affectés : URL -...

snare

SNARE सुपर नेक्स्ट जनरेशन एडवांस्ड रिएक्टिव हनीपॉट परिचय SNARE एक वेब एप्लिकेशन हनीपॉट सेंसर है जो इंटरनेट से सभी प्रकार की दुर्भावना को आकर्षित करता है। दस्तावेज़ीकरण दस्तावेज़ीकरण यहाँ पाया जा सकता है। मूल अवधारणाएँ पहले सतह। आक्रमण सतह निर्माण पर ध्यान केंद्रित करें। सेंसर और मास्टर। हल्के...

CVE-2024-55060

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS عنوان الاستغلال: Rafed CMS Website v1.44 - Cross Site Scripting XSS التاريخ: 2024-03-12 CVE: CVE-2024-55060 مؤلف الاستغلال: Abdulaziz Saad @b4zb0z الصفحة الرئيسية للبائع: https://www.rafed-system.org/ رابط البرنامج: N/A الإصدار: 1....

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

ddos

ndbiaw A Python script to DDOS a website using HTTP Flood method, a normal website only needs 5 seconds to completely collapse! Usage: This script can run on both Windows and Android Termux, below is the guide: root@kitploit: pip install -r requirements.txt python ndbiaw.py Important!!! This scri...

struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC विवरण यह CVE-2023-30253 Dolibarr 17.0.0 PHP Code Injection के लिए मेरा PoC है, जब CMS वेबसाइट प्लगइन कोर सक्षम होता है, तो एक प्रमाणित हमलावर एप्लिकेशन प्रतिबंधों को दरकिनार करके php कोड इंजेक्शन के माध्यम से रिमोट कमांड निष्पादन प्राप्त कर सकता है। स्थापना...

CVE-2017-0108

माइक्रोसॉफ्ट ऑफिस 2007 SP3; 2010 SP2; और वर्ड व्यूअर; स्काइप फॉर बिजनेस 2016; लिंक 2013 SP1; लिंक 2010; लाइव मीटिंग 2007; सिल्वरलाइट 5; विंडोज विस्टा SP2; विंडोज सर्वर 2008 SP2 और R2 SP1; और विंडोज 7 SP1 में विंडोज ग्राफिक्स कम्पोनेंट दूरस्थ हमलावरों को एक क्राफ्टेड वेब साइट के माध्यम से मनमाना क...

StegoScan

StegoScan Overview StegoScan.py is a powerful, next-generation tool for automated steganography detection in websites, web servers, and local directories, integrating AI-driven object and text recognition with deep file analysis. Unlike traditional steganography detection tools that focus on a...

AllPhish

تويتر Hacker Destination - مدونة Hacker Destination صفحات الويب : 1 Facebook| 2 Gmail ---|--- 3 Instagram| 4 Twitter 5 Github| 6 Netflix 7 Paypal| 8 Origin 9 Steam| 10 Yahoo 11 LinkedIn| 12 ProtonMail 13 Wordpress| 14 Microsoft 15 IGFollowers| 16 Ebay 17 Pinterest| 18 CrytoCurrency 19 Verizon| 20...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

POC_CVE-2026-35037

CVE-2026-35037 Ech0 SSRF प्रयोगशाला यह रिपॉजिटरी CVE-2026-35037 के लिए एक स्थानीय, पृथक पुनरुत्पादन प्रयोगशाला है, जो Ech0 के GET /api/website/title एंडपॉइंट में एक अप्रमाणित SSRF कमजोरी है। प्रयोगशाला क्लाउड मेटाडेटा या तृतीय-पक्ष बुनियादी ढांचे के बजाय एक नियंत्रित स्थानीय साक्ष्य सर्वर का उपयो...

wsvuls

WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers...

Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting

The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php. id: CVE-2016-10973 info: name: Brafton WordPress Plugin 3.4.8 - Cross-Site Scripting author: Harsh severity: medium description: | The Brafton plugin...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

PHPJabbers Food Delivery Script - SQL Injection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php. id: CVE-2023-40748 info: name: PHPJabbers Food Delivery Script - SQL Injection author: ritikchaddha severity: critical description: | PHPJabbers Food Delivery Script 3.0 has a SQL injecti...

Tiempo.com <= 0.1.2 - Cross-Site Scripting

Tiempo.com before 0.1.2 is susceptible to cross-site scripting via the page parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to stea...

WordPress Copyright Proof <=4.16 - Cross-Site-Scripting

WordPress Copyright Proof plugin 4.16 and prior contains a cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users when a specific setting is enabled. id: CVE-2022-1906...

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event. id: CVE-2021-24510 info: name: WordPress MF Gig Calendar =1.2 which...

WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting

WordPress Goto Tour & Travel theme before 2.0 contains an unauthenticated reflected cross-site scripting vulnerability. It does not sanitize the keywords and startdate GET parameters on its Tour List page. id: CVE-2021-24235 info: name: WordPress Goto Tour & Travel Theme =2.0 to mitigate the XSS...