kali-cloud

Script di build di Kali-Cloud Costruttore di immagini cloud di Kali Linux tramiteFAI Fully Automatic Installation, forked da Debian Cloud Images. Questi sono gli stessi build-scripts che il team di Kali utilizza per generare le immagini cloud ufficiali di Kali Linux, disponibili su...

can-ctr-escape-cve-2022-0492

Una imagen de contenedor que prueba si un entorno de contenedor es vulnerable a escapes mediante CVE-2022-0492. Es mejor ejecutarlo en un contenedor nuevo que ejecute una imagen construida con: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest . Una imagen...

CVE-2024-7954

CVE-2024-7954 - Exploit de Ejecución Remota de Comandos RCE en SPIP 4.2.8 Este script explota una vulnerabilidad de Ejecución Remota de Código en SPIP versión 4.2.8 a través del endpoint porteplumeprevisu. La vulnerabilidad permite a atacantes no autenticados inyectar código PHP mediante la...

CVE-2026-102774

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content in all versions up to, and including, 1.12.1 due to insufficient input sanitization and output escaping. This makes ...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate docx generating to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. create blink .docx file. 2. add "Bitmap Image" object in "Insert/Object" menu. 3. save and unzip docx. 4. modify word/rels/document.xml.rels 5. modify word/document.xml 6. zip...

CVE-2026-102774 SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content in all versions up to, and including, 1.12.1 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-102774

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 1.12.1 . The flaw exists in the Community Post Content due to insufficient input sanitization and output escaping. Specificall...

cve-2016-7434

CVE-2016-7434 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2016-7434 Autor de la imagen: https://github.com/opsxcq/exploit-CVE-2016-7434...

CVE-2026-91862

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-image-points' parameter in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...

libqcow

libqcow è una libreria per accedere al formato file immagine QEMU Copy-On-Write QCOW. Informazioni sul progetto: Stato: alpha Licenza: LGPL-3.0-or-later Formati QCOW supportati in sola lettura: versione 1 versione 2 versione 3 Funzionalità del formato QCOW supportate: compressione zlib DEFLATE...

CVE-2026-91862 Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-image-points' parameter in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-96101

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-image-points' parameter in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-91862

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping associated with the 'data-image-points' parameter. This flaw allows authenticated...

ipmap

Inglés readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • Italian readme • Русский readme • Indonesian readme • فارسی readme • عربي readme • Türkçe readme • Polskie readme IPMap...

CVE-2019-11447

CVE-2019-11447 - PoC Explota CuteNews 2.1.2 mediante comprobaciones deficientes de carga de archivos utilizadas al subir una imagen de avatar, lo que conduce a RCE. Instalación Clona el repositorio e instala los requisitos. pip install -r requirements.txt Uso Para subir un avatar necesitarás una...

EpiReal-Bench

FALSE CLAIMS, CREDIBLE IMAGES: A RED-TEAMING BENCHMARK FOR COMMERCIAL IMAGE GENERATORS Abstract Image-generation models can now produce text-rich, natural-looking visual artifacts that are hard to distinguish from real-world evidence, such as news reports and textbook pages. Yet, the same...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Prueba de Concepto POC por CRFSlick, descubierto por AkkuS Se descubrió un problema en CutePHP CuteNews 2.1.2. Un atacante puede infiltrarse en el servidor mediante el proceso de carga de avatar en el área de perfil a través del campo avatarfile hacia...

PT-2026-109801

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

PT-2026-109482

Name of the Vulnerable Software and Affected Versions 3D Product configurator for WooCommerce versions prior to 2.16.3 Description Remote Code Execution is possible due to missing authentication and nonce checks on the wp loaded handler. The issue occurs because the xpv image POST parameter is no...