EUVD-2026-83677

The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promoteusers capability when assigning roles during a CSV import, allowing users with only the createusers capability to create new administrator accounts or promote existing users to...

EUVD-2026-83661

The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

CVE-2026-92541

The Import and export users and customers WordPress plugin before 2.5.2 fails to enforce the promote_users capability in its front-end import functionality. As a result, users holding only the create_users capability can change the role of existing users, including promoting them to administrator...

CVE-2026-92540

The Import and export users and customers WordPress plugin (versions before 2.5.2 ) fails to correctly enforce the promote_users capability (via the caller_can_promote_users function) when assigning roles during a CSV import . This allows users holding only the create_users capability to either c...

CVE-2026-16542

The Import and export users and customers WordPress plugin prior to version 2.4.5 contains a Server-Side Request Forgery (SSRF) vulnerability. During a CSV import, a user-supplied URL (specifically via the bp_avatar parameter) is not validated before the server makes a request to it, allowing hig...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

CVE-2021-42205

CVE-2021-42205 El controlador ELAN Miniport touchpad para Windows anterior a 24.21.51.2, utilizado en hardware de PC de múltiples fabricantes, permite a los usuarios locales provocar un bloqueo del sistema enviando una determinada solicitud IOCTL, porque esa solicitud se maneja dos veces...

CVE-2021-24959

CVE-2021-24959 Descripción El plugin WP Email Users de WordPress hasta la versión 1.7.6 no escapa el parámetro dataraw en la acción AJAX weuselectedusers1, disponible para cualquier usuario autenticado, permitiéndoles realizar ataques de inyección SQL. root@kitploit: CVE CVE-2021-24959 CVSS 8.8...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

CVE-2022-34961

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Vulnerability Explanation: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Users Timeline module. Attack Vectors: The attacker must post something on t...

CVE-2024-51032

CVE-2024-51032 Descripción Una vulnerabilidad de Cross-site Scripting XSS en managerecipient.php de Sourcecodester Toll Tax Management System 1.0 permite a usuarios autenticados remotos inyectar scripts web arbitrarios a través del campo de entrada 'owner'. Tipo de Vulnerabilidad Cross Site...

CVE-2026-3629

CVE-2026-3629 - Comprobador de Escalada de Privilegios en WordPress Una herramienta de línea de comandos para detectar CVE-2026-3629 , una vulnerabilidad crítica de escalada de privilegios en el plugin de WordPress "Import and export users and customers". 📢 Únete a Nuestra Comunidad ¡Mantente al...

CVE-2026-64638

CVE-2026-64638 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

simplewall

simplewall Definitivamente para usuarios avanzados. Descripción: Herramienta simple para configurar la Plataforma de Filtrado de Windows WFP que puede configurar la actividad de red en su computadora. La aplicación ligera pesa menos de un megabyte y es compatible con Windows 7 SP1 y sistemas...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

Compromised-Org-Chart-Generator

Compromised Org Chart Generator Overview Active Directory is used by organization as the identity provider. It contains information of all employees including their names, job titles, departments, and their managers. Password audits can help to discover weaknesses and risks. You might try passwor...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 HiveNightmare vulnerability checker and workaround Flow The script has the following flow: Requires it to run with Administrator privileges Check Windows 10 version is affected by the vulnerability. IF affected by vulnerability: Show Windows version may be affected b...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...