CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...

Unauthenticated-RCE-FUXA-CVE-2023-33831

Unauthenticated RCE FUXA CVE-2023-33831 The vulnerability affects FUXA's scripting component, due to lack of control or sanitization on inputs that can be controlled by users, thus allowing the use of dangerous methods that can be scaled for remote code execution. The affected route is...

CVE-2023-28121-WordPress-Privilege-Escalation

🔐 CVE-2023-28121 — WordPress Privilege Escalation Practical exploitation of a critical vulnerability in WordPress using the WooCommerce Payments plugin. 📌 Summary CVE-2023-28121 allows creating administrator users without authentication via the REST API. Severity: Critical CVSS 9.8 Impact: Full...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 es una omisión de autenticación que resulta en una fuga de información en servidores Joomla!. Aunque está clasificada como CVSSv3 5.3 gravedad media por NVD, esta vulnerabilidad podría permitir a un atacante lograr la ejecución de código en las circunstancias...

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 — FortiOS / FortiProxy / FortiSwitchManager Aut...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Inyección SQL no autenticada Descripción El plugin Collapsing Categories para WordPress es vulnerable a Inyección SQL a través del parámetro 'taxonomy' de la API REST /wp-json/collapsing-categories/v1/get en todas las versiones hasta la 3.0.8...

Nim_DInvoke

Nim DInvoke D/Invoke implementation in Nim All Nim binaries typically expose the same 58-60 Windows API functions: All other Windows API functions are typically resolved on runtime via GetProcAddress and LoadLibraryA as mentioned in OffensiveNim or this blog post. So, it's not possible to hide AP...

YARAify

YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...

Ekko

Ekko A small sleep obfuscation technique that uses CreateTimerQueueTimer Win32 API. Proof of Concept. Can be done better. NOTE This implementation has known flawes. So I wouldn't recommend using it without knowing how it works or know how to spot and fix those flaws. TLDR: don't copy and past it...

pentest-mapper

Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the...

burp-cc-bridge

CC-Bridge Una extensión de Burp Suite API Montoya que expone las primitivas más útiles de Burp a través de una API HTTP en localhost para que un shell de codificación agéntico Claude Code, OpenAI Codex, etc. pueda conducir Burp desde curl. Funciona en Burp Community. Descargar Obtenga el último J...

TokenPlayer

TokenPlayer Manipulating and Abusing Windows Access Tokens. TokenPlayer is just a small tool i made to learn win32 api programming and understand better the access token model of windows. Features: Stealing and Impersonating primary tokens. Impersonating Protected Processes. Bypassing UAC by usin...

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

CVE-2025-29557

CVE-2025-29557 – Divulgación de Credenciales de la API de Configuración de Correo de ExaGrid 📝 Resumen Título de la Vulnerabilidad : Divulgación de Credenciales SMTP a través de la API de Configuración de Correo Producto : Dispositivo de Respaldo ExaGrid EX10 Versiones Afectadas : 6.3 – 7.0.1.P08...

secret-regex-list

Secret Regex List List of regex for scraping secret API keys and juicy information. You can directly copy this and put into your python code, some regexes might require three quotes or else it will break the code. "Cloudinary" : "cloudinary://.", "Firebase URL": ".firebaseio.com", "Slack Token":...

spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-gateway/tree/master.svg?style=svg"CircleCI",...

CVE-2025-13315

🛡️ CVE-2025-13315 - Bypass de Autenticación Crítico en Twonky Server 8.5.2 -e63939?style=for-the-badge Un atacante no autenticado puede eludir la autenticación de la API, filtrar credenciales de administrador de los registros y obtener acceso completo de administrador. 📋 Resumen CVE-2025-13315 es...

CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Uso: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Derechos de autor: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2025-29556

CVE-2025-29556 – Omisión de Creación de Cuenta de Oficial de Seguridad en ExaGrid 📝 Resumen Título de Vulnerabilidad : Creación No Autorizada de Cuenta de Oficial de Seguridad Producto : ExaGrid EX10 Backup Appliance Versión Afectada : Probada en la versión actual en el momento de la divulgación...

WTSRM

WTSRM - Writing Tiny Small Reliable Malware demo repository for my corresponding talk. Unhooks all Windows Dlls with \KnownDlls\ No CRT dependencies Small size Low entropy Random string encryption key thus no plaintext strings API hashing Hook detection Walks around hooks for initial unhooking on...