WordPress SendPress Newsletters plugin <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure vulnerability

Unauthenticated Newsletter Sending Log Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin SendPress Newsletters versions = 1.26.1.20...

CVE-2026-92990

The SendPress Newsletters WordPress plugin affects versions through 1.26.1.20 . The vulnerability stems from a hardcoded token used to protect a logging endpoint, which is identical across all site installations instead of being a unique per-site secret. This flaw allows unauthenticated users to ...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

PrintNightmare

TryHackMe | PrintNightmare PrintNightmare Learn about the vulnerability known as PrintNightmare CVE-2021-1675 and CVE-2021-34527 Tarea 6 Detección: Registros de eventos de Windows Visor de eventos Registros de aplicaciones y servicios Microsoft Windows PrintService Admin...

Phant0m

Phant0m | Windows Event Log Killer Svchost is essential in the implementation of so-called shared service processes, where a number of services can share a process in order to reduce resource consumption. Grouping multiple services into a single process conserves computing resources, and this...

rip_raw

Rip Raw Rip Raw es una pequeña herramienta para analizar la memoria de sistemas Linux comprometidos. Su propósito es similar al de Bulk Extractor, pero está enfocada particularmente en extraer registros del sistema logs de volcados de memoria de sistemas Linux. Esto permite analizar sistemas sin...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

grapl

Grapl Grapl es una plataforma SIEM basada en grafos, construida por y para ingenieros de respuesta a incidentes. AVISO Grapl ha cesado operaciones como empresa. Por lo tanto, este código ya no se desarrolla activamente, pero permanecerá disponible en un estado archivado. Detalles Grapl aprovecha...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

PT-2026-108962

Name of the Vulnerable Software and Affected Versions AWS Tools for PowerShell versions prior to 5.0.306 Description Sensitive information is inserted into log files, which may allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log...

check-your-pulse

check-your-pulse Esta utilidad puede ayudar a determinar si existen indicadores de compromiso IOC en los archivos de registro de un Pulse Secure VPN Appliance para CVE-2019-11510. La Agencia de Seguridad de Infraestructura y Ciberseguridad CISA ha visto que muchas organizaciones han sido vulnerad...

CVE-2025-11177

Trigger the SQLi with a time-based payload in the public login curl -w '\nTIME:%timetotal\n' -s \ -d 'log=anything%27%3B%20SELECT%20pgsleep5%3B%20--&pwd=irrelevant&wp-submit=Log+In' \ -d 'redirectto=' \ -d 'testcookie=1' \ 'http://target/wp-login.php'...

cve-2023-4966-iocs

Escanear IoCs de CVE-2023-4966 Script: check-cve-2023-4966.py El script busca en los registros de Citrix NetScaler posibles indicios de explotación de CVE-2023-4966. Uso usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for possible CVE-2023-4966...

CVE-2026-11939

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery...

burp-reflux

Burp Proxy reflux log parser: Burp proxy text log converter to CSV and SQLLite Reflux for Burp log parsing and conversion Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

CVE-2026-11939

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) may be vulnerable to audit log forgery due to CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') . The impact includes a low integrity ...