EFISwissKnife

. //| | | | | | | \ | \ | | / / / || / / . . . / / || | |/ | | |/ \ / / / |/ /// | || | /|| | / / / / / / EFI Swiss Knife UEFIリバースエンジニアリングを改善するIDAプラグイン Copyright C 2016, 2017 Pedro Vilaça fG! - [email protected] - https://reverse.put.as これはUEFIバイナリのリバースエンジニアリングを支援するIDAプラグインです。...

efiSeek

适用于 Ghidra 的 efiSeek 简介 该分析器可自动执行 EFI 文件的研究过程，帮助发现和分析已知协议、SMI 处理器等。 功能特性 查找已知的 EFI GUID 识别通过 LOCATEPROTOCOL 函数定位的协议 识别用作 NOTIFY 函数的函数 识别通过 INSTALLPROTOCOLINTERFACE 安装到模块中的协议 识别用作中断函数的函数（如某些硬件、软件/子中断）...

ida-efiutils

EFI scripts for IDA Pro Some IDA scripts to assist with reverse engineering EFI executables. This package contains the following files: 1. efiutils.py - IDAPython module with some helper functions 2. efiguids.py - A collection of known GUIDs for EFI protocols 3. efiguidsami.py - A collection of...

ida-efitools2

概要 UEFIリバースエンジニアリング機能を拡張するためのIDAプラグインです。ida-efitoolsをベースに、多数の修正と新機能を追加しています。 Python 2とPython 3の両方で動作します。旧バージョンのIDA Pro 7.xもサポートしていますが、保証はありません。 機能 GUID定義 構造体の伝播（レジスタ、xrefs、スタック変数） プロトコルとインターフェースの識別 未知のプロトコルの初期化 拡張機能 プラグインとしてもスクリプトとしても使用可能。...

ida-efitools2

About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...

wp-ulike-cve-2025-32259-poc

WP ULike ≤ 4.7.9.1 - Unauthenticated Content Spoof CVE-2025-32259 🔬 A simple PoC demonstrating CVE-2025-32259 in the WP ULike plugin for WordPress. 🚨 Educational use only – do not test on systems without explicit authorization. 🧠 Overview WP ULike is a popular WordPress plugin that allows users t...

CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 The exploit drops here first. Follow @KNxploited on Telegram — your elite feed for freshly disclosed CVEs, working PoCs, and precision security research. Updated relentlessly. Built for those who stay ahead. 🧠 Overview CVE-2026-0920 is a CVSS 9...

CVE-2026-8181

CVE-2026-8181 개념 증명 연구 • 검증 • 보안 테스트 "장미는 빨갛고, 제비꽃은 파래요, 너를 생각하다가 바지에 지렸어요. rizz" CVE 개요 필드| 값 ---|--- CVE ID| CVE-2026-8181 유형| Authentication Bypass 영향| Privilege Escalation / Full Site Takeover 공격 경로| Network Remote, Unauthenticated CVSS| 9.8 Critical 영향받는 소프트웨어| Burst Statistics –...

ghidra-firmware-utils

Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...

CVE-2024-25092

CVE-2024-25092 Exploit Overview CVE-2024-25092 is a high-severity vulnerability affecting the WordPress NextMove Lite plugin versions = 2.17.0. This vulnerability allows a subscriber+ user to install and activate arbitrary plugins on a WordPress site due to missing authorization checks. Details...

CVE-2021-29447

WAV iXML XXE Exploit Generator Generates malicious WAV files that exploit XXE vulnerabilities in WordPress plugins parsing iXML metadata chunks e.g., BookingPress │ Target │ └──────────┘ └──────────┘ ▲ │ │ │ 2. Parse XML │ │ │ 3. GET /xxe.dtd │ │─────────────────────────────┘ │ │ 4. GET...

Wordpress-ebook-CVE-2016-10924

Wordpress eBook Download 1.1 plugin has a file disclosure vulnerability by abusing it's get parameter in the filedownload.php file. This script brute forces different processes on the server using this vulnerability. USAGE: python pidbrute.py...

WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by ChuongVN in WordPress Plugin Featured Image from URL versions = 6.0.7...

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...

WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nixxies in WordPress Plugin Search in Place versions = 1.5.5...

WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability

Settings Change vulnerability discovered by Mor Golan in WordPress Plugin 워드프레스 결제 심플페이 versions = 5.5.17...

CVE-2024-0235-PoC

CVE-2024-0235-PoC The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog Usage: usage: CVE-2024-0235.py -h --url URL CVE-2024-0235.py: error:...

WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin AI Chatbot for WordPress – Hyve Lite versions = 2.0.2...

CVE-2024-50476

CVE-2024-50476 GRÜN spendino Spendenformular = 1.0.1 - Unauthenticated Arbitrary Options Update Description: The GRÜN spendino Spendenformular – Mehr Spenden! Weniger Arbeit! plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a...