blueshrimp

Prova de conceito para CVE-2025-48593 baseada na análise do patch. Não precisa se preocupar com isso. Pelo que sei, os telefones NÃO são vulneráveis ao CVE-2025-48593. O problema afeta apenas dispositivos Android que suportam atuar como fones de ouvido / alto-falantes Bluetooth, como alguns...

CVE-2024-12594

CVE-2024-12594 ALL In One Custom Login Page input type="submit" value="Submit requ...

flare-vm

FLARE-VM Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine VM. FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on t...

CVE-2024-12558

CVE-2024-12558 WP BASE Booking of Appointments, Services and Events history.pushState'', '', '/'; document.forms0.submit;...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS or Windows. You have access to a remote network via ssh. You don't necessarily have admin access on th...

Flowise-RCE-CVE-2025-59528

CVE-2025-59528 — Execução Remota de Código RCE Autenticada no Flowise AI Visão Geral ID do CVE: CVE-2025-59528 Software Afetado: Flowise AI Versões Vulneráveis: = 3.0.4 Versão Corrigida: 3.0.5 e posterior Severidade: Crítica Autor: r3nsi15 Data: 2025 Descrição As versões do Flowise AI até 3.0.4...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Injeção de SQL não autenticada Descrição O plugin Navayan CSV Export para WordPress está vulnerável a Injeção de SQL nas versões até a 1.0.9, inclusive, devido ao escape insuficiente no parâmetro fornecido pelo usuário e à falta de preparação suficiente...

CVE-2024-55980

CVE-2024-55980 Wr Age Verification = 2.0.0 - Injeção SQL não autenticada Descrição O plugin Wr Age Verification para WordPress é vulnerável a Injeção SQL em todas as versões até a 2.0.0, inclusive, devido a escape insuficiente no parâmetro fornecido pelo usuário e à falta de preparação suficiente...

CVE-2024-55976

CVE-2024-55976 Critical Site Intel = 1.0 - Injeção SQL não autenticada Descrição O plugin Critical Site Intel para WordPress é vulnerável a Injeção SQL nas versões até, e incluindo, a 1.0 devido ao escape insuficiente no parâmetro fornecido pelo usuário e à falta de preparação suficiente na...

setup-wordpress-with-security-best-practice

إعداد ووردبريس مع أفضل ممارسات الأمان تمت كتابة هذا المستند بهدف أن يكون مناسبًا لتطبيقات الويب المطورة باستخدام ووردبريس والتي لا تتفاعل مع المستخدمين. وهو مخصص بشكل أساسي لصفحات العلامات التجارية للشركات، وطرق العرض الثابتة المختلفة، وصفحات التوظيف، والمواقع المماثلة. بالنسبة للمواقع الإلكتروني...

CVE-2026-76053

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This mak...

ator

Authentication Token Obtain and Replace Extender Introduction In the world of web security testing, automation is key, and Burp Suite is the go to choice. However, to truly harness the power of Burp for automated scanning, you need the right plugins. That's where ATOR comes in. This open-source...

maltrail v3.2

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

CVE-2021-43798

CVE-2021-43798: Vulnerabilidade de leitura arbitrária de arquivos no Grafana Adicionado template nuclei para reconhecimento de todas as versões Windows+Linux Lista de 52 plugins: root@kitploit: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

Apache-Hunter

ApacheHunter - Scanner Avançado de Servidores Apache Desenvolvido por Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter é um scanner poderoso projetado para detectar servidores Apache, identificar versões e verificar a vulnerabilidade CVE-2024-22393 Pixel Flood em instalações do...

wshlient

Wshlient Web Shell Client Description & Demo Wshlient is a web shell client designed to be pretty simple yet versatile. One just need to create a text file containing an HTTP request and inform where Wshlient inject the commands, then you can enjoy a shell...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 Você pode ver a versão coreana do post aqui : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR Uma vulnerabilidade de Cross-Site Scripting XSS na página inicial do captive portal do roteador de segunda geração poderia...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...