# Exploit Title: XXE OOB - fronsetiav1.1 # Date: 11/2024 # Exploit Author: Andrey Stoykov # Version: 1.1 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot ...

***** #Exploit Title: Kyptronix LLP - Sql Injection #Date: 2024-11-22 #Exploit Author: Behrouz Mansoori #Google Dork: "Designed & developed By Kyptronix LLP" #Category:webapps #Tested On: Mac, Firefox ...

# Exploit Title: Reflected XSS - fronsetiav1.1 # Date: 11/2024 # Exploit Author: Andrey Stoykov # Version: 1.1 # Tested on: Debian 12 # Blog: https://msecureltd ...

***** #Exploit Title: Kyptronix LLP - Blind Sql Injection Vulnerability #Date: 2024-11-22 #Exploit Author: Behrouz Mansoori #Google Dork: "Designed & developed By Kyptronix LLP" #Category:webapps ...

Another trivial Windows Defender TrojanWin32Powessere.G Detection Mitigation Bypass C:\Users\gg>rundll32.exe javascript:"\\..\\mshtml\\..\\PWN\\mshtml ...

## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'rex/stopwatch ...

***** #Exploit Title: Blue sun info - Blind Sql Injection Vulnerability #Date: 2024-11-13 #Exploit Author: Behrouz Mansoori #Google Dork: "Powered By Blue sun info PM." #Category:webapps #Tested On: ...

# Exploit Title: Heatmiser Wifi Thermostat 1.7 - Cross-Site Request Forgery ( CSRF ) # Dork: intitle:"Heatmiser Wifi Thermostat" # Shodan : http.html_hash:-1473355578 ...

# Exploit Title: Stored XSS in Calibre-web # Date: 07/05/2024 # Exploit Authors: Pentest-Tools.com (Catalin Iovita & Alexandru Postolache) # Vendor Homepage: (https ...

With this code, you can search Google and isolate the sites that have this security issue and test which ones have the WP JSON/WP/V2/Users API endpoint, which allows you to retrieve user data such as ...

# Exploit Title: Proteus Home P1B - Default Password and Broken Access Control # Date: 11/16/2024 # Exploit Author: parsa rezaie khiabanloo # Vendor Homepage: omntec ...