EUVD-2026-96770

The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on ever...

CVE-2026-86798 HootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint

The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the...

CVE-2026-86798

The HootBoard WordPress plugin, versions through 3.1.4 , is vulnerable to unauthenticated stored XSS . The flaw exists because the plugin fails to perform authorization checks on certain REST endpoints and does not properly escape values stored via these endpoints before displaying them on public...

CVE-2026-81649 Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure

The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer ord...

CVE-2026-81649

The Fundiin for WooCommerce WordPress plugin, in versions up to and including 3.4.0 , suffers from a critical improper authorization vulnerability on several REST API routes . The flaw stems from the plugin relying on a hardcoded credential that is identical across all installations. This allows ...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 1. 요약 참고: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2는 관계형 데이터베이스 관리 시스템으로, SQL 엔진 안에서 Java 코드를 직접 컴파일하고 실행할 수 있는 기능을 제공한다. H2 드라이버는 JDBC URL을 파싱하여 애플리케이션과 데이터베이스 간의 연결을 설정한다. 이때 URL에 포함된 설정 파라미터를 통해 데이터베이스의 초기 상태나 동작을 제어할 수 있다. 문제가 되는 H2 2.1.210 이전 버전에는 JDBC...

CVE-2024-24919

Toma una lista de IPs y puedes especificar hilos con -t python3 exploit.py -i ips.txt -t 15 -o output.txt Solo con fines educativos...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — laboratorio defensivo local Dos instancias de NGINX en Docker: fragmento de reescritura arriesgada basado en patrones frente a fragmento corregido de captura nombrada, fijadas a nginx:1.30.0-alpine / nginx:1.30.1-alpine. Los scripts ejecutan peticiones curl benignas,...

foremost

FOREMOST Foremost is a Linux program to recover files based on their headers and footers. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers are specified by a configuration file, so you can pick and choose which...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

otseca

Herramienta de auditoría de seguridad de código abierto para buscar y volcar la configuración del sistema. Introducción | Descripción | Requisitos | Salida | Parámetros | Informes | Cómo funciona | Otros Introducción El objetivo principal La premisa principal de crear esta herramienta fue la...

CIFSwitch-Checker-CVE-2026-46243

CIFSwitch Checker - CVE-2026-46243 Checker para Linux que permite identificar configuraciones potencialmente vulnerables a la vulnerabilidad CIFSwitch CVE-2026-46243. No explota la vulnerabilidad ni modifica el sistema. El objetivo principal es ayudar a identificar equipos potencialmente afectado...

MDE-AuditCheck

MDE-AuditCheck Makes sure all audit settings MDE relies on are properly set in the GPO The script relies on the Remote Server Administration Tools RSAT...

aws_public_ips

awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...

ICS-Security-Tools

Strumenti, Suggerimenti e Trucchi del Mestiere per la Sicurezza ICS Sviluppato come risorsa comunitaria Questo progetto intende riunire strumenti, suggerimenti e trucchi del mestiere per lavorare sulla cybersicurezza nell'ambiente ICS. Il repository di codice ospiterà script, strumenti,...

Security_incident_report

01. Infrastructure Configuration The infrastructure for this project is not managed with IaC e.g., Terraform code; instead, it was built by installing pfSense and Wazuh and then changing settings directly from the admin GUI. So instead of "code", this document records the network diagram,...

user.js

Questo repository e la pagina web interattiva collegata di seguito sono le uniche fonti ufficiali - non fidarti di nessun altro sito che affermi di essere Arkenfox 🟪 user.js Un user.js è un file di configurazione che può controllare le impostazioni di Firefox - per una descrizione e spiegazione...