Discover @V35HR4J Open Source projects

Veshraj Ghimire (@V35HR4J)

V35HR4J

Stars
165
Global Rank 138,714 (Top 5 %)
Followers 133
Following 57
Registered almost 5 years ago
Most used languages

Python
38.5 %

CSS
15.4 %

HTML
15.4 %

C++
7.7 %

SCSS 7.7 %

Shell
7.7 %

PHP
7.7 %
Location 🇳🇵 Nepal
Country Total Rank 106
Country Ranking

C++
10

SCSS 35

CSS
37

Python
40

Shell
80

PHP
319

HTML
536

Automate-Telegram

Simple python program to execute terminal commands on telegram chats directly.

Your-First-Contribution

You may learn how to make successful pull requests and get your first valid open source contribution by using this repository.

Dutch-Government-Scopes

https://english.ncsc.nl/contact/reporting-a-vulnerability-cvd

30-Days-of-PHP-source-code-analysis

30 Days of PHP source code analysis

PassEnum

Enumerate most common password patterns with custom keyword.

Udemy-Auto-Enroller

Input list of udemy free courses and let python enroll it for you.

Port-Scanner

Simple Port Scanner By newbie :)

CVE-2022-1597

The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks

OSCP-Like-Machines

https://blog.veshraj.info.np/

veshraj.github.io

PhpLearning

SocialTimeOut

Have a break from social life

VeshSite

CVE-2022-1051

WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields

CVE-2021-24545

The plugin does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could perform Cross-Site Scripting attacks against users, which could potentially lead to privilege escalation when an admin view the related post/s.

C-Programming-Tutorials

CVE-2022-1598

WPQA < 5.5 - Unauthenticated Private Message Disclosure

SATechnicalOnboarding

V35HR4J

Hi, nice to see you here!

reviewing-a-pull-request

RandomAPIs

CVE-2021-24563

The plugin does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly

Searchor-2.4.1-RCE

searchor is a ⚡️ Quick and easy search engine queries. Affected versions of this package are vulnerable to Arbitrary Code Execution due to unsafe implementation of eval method.