linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

Ladon

Ladon Large-scale Intranet Penetration Scanner Cobalt Strike Plugin Memory Loading Program Introduction Ladon is a large-scale intranet penetration scanner, domain penetration, and lateral movement tool, featuring PowerShell modules, Cobalt Strike plugins, memory loading, and fileless scanning. I...

macOSTools

macOSTools macOS Offensive Tools AUnit Example XCode project for Audio Unit Plugins MigrationToolPayload Migration tool plugin SpecialDelivery Installer plugin authplugin Authentication Plugin dylibinjection Source code for dylib injection. Based off of code from Jonathan Levin...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

CVE-2026-109150

The WP PageNavi Style WordPress plugin, version 1.4 and earlier , is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is the failure to sanitize and escape specific settings and the absence of CSRF checks during the saving process. An attacker could exploit this by forcing a logg...

EUVD-2026-117352

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers to read customer and order information and to add or delete order notes for ...

CVE-2026-105971

The Car Dealer (Dealership) and Vehicle sales WordPress plugin, in versions up to and including 4.73 , is vulnerable to an unauthenticated content disclosure. The root cause is that the plugin's single-listing AJAX action (specifically cardealer_single_car_ajax) does not restrict access to publis...

EUVD-2026-117349

The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL statement, and treats an empty API key, which is its own default, as valid authentication, allowing unauthenticated attackers to read arbitrary data from the database...

CVE-2026-100144

The IVPAY payments WordPress plugin (version 1.0.8 and below) is vulnerable to unauthenticated SQL injection via the payment_id parameter in its payment callback. The root cause is the failure to sanitize input values used in SQL statements, combined with the plugin treating an empty API key (the...

CVE-2026-90966

The Essential Real Estate WordPress plugin (versions before 5.3.5 ) contains a vulnerability in one of its AJAX actions . The plugin fails to verify if a listing package selected for free activation is genuinely free or if the requesting user is authorized to access it. This allows a self-registe...

EUVD-2026-117346

The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment...

EUVD-2026-117343

The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of its AJAX actions, allowing unauthenticated users to read the full contents of property listings that have not been published, together with the private name, email...

CVE-2026-90963

The Essential Real Estate WordPress plugin (versions before 5.3.5 ) is vulnerable to an authorization bypass in one of its AJAX actions, specifically associated with property_print_ajax. Due to a lack of publication-status checks and insufficient authorization, unauthenticated users can access th...

CVE-2026-90964

The Essential Real Estate WordPress plugin, in versions prior to 5.3.5 , is vulnerable to unauthenticated arbitrary email sending. The root cause is a failure to restrict the recipient of one of its contact email actions, which allows an attacker to send emails to arbitrary addresses. These email...

CVE-2026-86795

The Community Events WordPress plugin (versions before 1.6.0 ) is vulnerable to an information disclosure flaw. Due to a lack of authorisation and nonce checks in one of its AJAX actions, unauthenticated users can retrieve details of event submissions awaiting moderation. These submissions are ot...

CVE-2026-85351

The FV Flowplayer Video Player WordPress plugin (versions before 7.5.56.7212 ) is vulnerable to Server-Side Request Forgery (SSRF) . The flaw exists because the plugin fails to validate user-supplied URLs before performing a server-side fetch. An attacker with Contributor-level access or higher c...

CVE-2026-86442

The WP Event Manager WordPress plugin, versions prior to 3.4.2 , is vulnerable to an unauthenticated information disclosure and content manipulation flaw. The root cause is a failure to verify the ownership or post type of a user-supplied post identifier during the front-end event submission flow...

CVE-2026-16304

The WP Event Manager WordPress plugin before version 3.4.2 is vulnerable to a content takeover due to insufficient validation of user-supplied post identifiers in one of its frontend forms. Any user with a Subscriber account or higher can exploit this to reassign the authorship of arbitrary posts...

CVE-2026-19256

The All In One Login WordPress plugin versions before 2.5.0 is vulnerable to an unauthenticated account takeover . The flaw exists because the plugin fails to adequately restrict the number of attempts made against the short numeric code used in its default-enabled passwordless email login . Furt...

EUVD-2026-117334

The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not feed those failed attempts into its own brute-force protection, allowing...