randomrobbiebf Goto Github PK

be-targets-gen

Reads a Binaryedge.io JSON blob and outputs the IP:PORT to a text file for parsing.

binary-edge-render-extract

Create a datatable output from a binaryedge render scan

bucket-brute

Aws S3 Tko Tool

cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

chart-down

Extracts all the chart lists from ChartMuseum

coldfusion-amf

Coldfusion AMF PWN

csp-log4j

Finds CSP report urls and tests to see if they are vulnerable to log4j

cve-2019-15896

LifterLMS <= 3.34.5 - Unauthenticated Options Import

cve-2019-18935

RCE exploit for a .NET deserialization vulnerability in Telerik UI for ASP.NET AJAX.

cve-2020-11651

cve-2020-12077

MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions

cve-2020-36730

CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls (Subscriber+)

cve-2020-4463

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability (CVE-2020-4463)

cve-2021-24356

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation

cve-2021-24507

Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection - CVE-2021-24507

cve-2021-24647

CVE-2021-24647 Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

cve-2021-25032

PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise

cve-2021-34621

ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

cve-2022-0439

CVE-2022-0439 - Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection

cve-2022-0952

Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update

cve-2022-1203

Content Mask < 1.8.4 - Subscriber+ Arbitrary Options Update

cve-2022-1442

WordPress Plugin Metform <= 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure

cve-2022-3904

CVE-2022-3904 MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics

cve-2022-45354

Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API

cve-2022-45808

LearnPress Plugin < 4.2.0 - Unauthenticated SQLi

cve-2022-47615

LearnPress Plugin < 4.2.0 - Unauthenticated LFI Description

cve-2023-0630

CVE-2023-0630 - Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection

cve-2023-2732

MStore API <= 3.9.2 - Authentication Bypass

cve-2023-2877

Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

cve-2023-2982

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass