CVE-2026-39745

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2019-10945

CVE-2019-10945 Esta es una versión en Python 3 del exploit original del equipo Haboob: https://www.exploit-db.com/exploits/46710...

EUVD-2026-93254

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2026-39745

The Contact Form to DB by BestWebSoft plugin for WordPress, version 1.7.6 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. This issue stems from the improper neutralization of input during web page generation (CWE-79). The vulnerability allows an attacker ...

CVE-2026-39745 WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

wpprobe

"¿Por qué escanear a ciegas cuando WordPress se expone solo?" WPProbe Un escáner rápido de plugins y temas de WordPress que detecta plugins instalados mediante enumeración de la API REST y temas a partir del descubrimiento en HTML, y luego los asocia con vulnerabilidades conocidas. Más de 5000...

CVE-2022-46169

CVE-2022-46169 Exploit corregido para CVE-2022-46169 originalmente de https://www.exploit-db.com/exploits/51166...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

CVE-2022-24637

CVE-2022-24637 Exploit corregido para CVE-2022-24637 xplt original: https://www.exploit-db.com/exploits/51026...

secureboot_objects

Objetos de Secure Boot Este repositorio se utiliza para almacenar los objetos de arranque seguro recomendados por Microsoft. Para documentación, visita nuestra Wiki! Control de versiones Este repositorio sigue el versionado semántico .., que es un esquema de versionado que transmite el significad...

CVE-2026-41558 WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerability

Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro = 1.16.1 versions...

CVE-2026-41558

The WP Synchro plugin (versions

safety

!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register 3. Running Your First Scan Basic Commands Service-Level Agreement SLA...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 84,997 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

exploitation-course

Curso de SEGURIDAD OFENSIVA E INGENIERÍA INVERSA OSRE Este repositorio es para el curso de Seguridad Ofensiva e Ingeniería Inversa Explotación Ofensiva de Software que solía enseñar en Champlain College y actualmente lo comparto gratuitamente en línea consulta el canal de YouTube para las...

Monitorr 1.7.6m - Unauthenticated Remote Code Execution

Monitorr 1.7.6m is susceptible to a remote code execution vulnerability. Improper input validation and lack of authorization leads to arbitrary file uploads in the web application. An unauthorized attacker with web access to could upload and execute a specially crafted file, leading to remote cod...

DomainMOD <=4.11.01 - Cross-Site Scripting

DomainMOD through version 4.11.01 is vulnerable to cross-site scripting via the assets/edit/host.php Web Host Name or Web Host URL field. id: CVE-2018-19915 info: name: DomainMOD =4.11.02 to mitigate this vulnerability. reference: - https://github.com/domainmod/domainmod/issues/87 -...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via /domain//admin/dw/add-server.php DisplayName parameters. id: CVE-2018-19892 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripti...

SugarCRM 3.5.1 - Cross-Site Scripting

SugarCRM 3.5.1 is vulnerable to cross-site scripting via phprint.php and a parameter name in the query string aka a $key variable. id: CVE-2018-5715 info: name: SugarCRM 3.5.1 - Cross-Site Scripting author: edoardottt severity: medium description: SugarCRM 3.5.1 is vulnerable to cross-site...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD through version 4.11.01 is vulnerable to cross-site scripting via the /assets/add/ssl-provider.php ssl-provider-name and ssl-provider's-url parameters. id: CVE-2018-20009 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD...