CVE-2026-96524 MCP Server for WordPress < 1.8.2 - Administrator Account Creation via CSRF

The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated requests when a condition an attacker can influence is present, allowing unauthenticated attackers to perform administrator-only actions, including creating a...

sterraxcyl

- S T E R R A - A unique SOCMINT tool to get informations on an instagram account from its following | followers...

StopDefender

StopDefender Stop Windows Defender programmatically creating a new token using TrustedInstaller and Windefend service accounts. One button stop action, no need for supply commandline options nor pid. Usefull for integration with Post Explotation frameworks. Blogpost...

CVE-2024-50483

CVE-2024-50483 Meetup = 0.1 - Authentication Bypass via Account Takeover Description: The Meetup plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1. This is due to the plugin not properly verifying a user's identity prior to authenticating them v...

CVE-2025-26199

🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...

CVE-2023-7028

CVE-2023-7028 | Toma de control de cuenta en GitLab Descargo de responsabilidad Este código es una prueba de concepto de la vulnerabilidad. No animo a nadie a usarlo en instancias de GitLab que no le pertenezcan. Esta herramienta ha sido desarrollada únicamente con fines de investigación y...

POC_CVE-2024-40492

CVE-2024-40492: XSS Almacenado a ATO Descripción El Cross-Site Scripting XSS Almacenado es un tipo de vulnerabilidad de seguridad que se encuentra típicamente en aplicaciones web. Ocurre cuando un atacante puede inyectar scripts maliciosos en una aplicación web, y esos scripts se almacenan en el...

EUVD-2026-87510

OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can exploit multi-account setups where a disabled default account retains credentials to read or modify Feishu resources through a revoked...

CVE-2026-100540 OpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled Account

OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can exploit multi-account setups where a disabled default account retains credentials to read or modify Feishu resources through a revoked...

CVE-2026-75816

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-75816 CVE-2026-75816 Frontend Admin by DynamiApps 3.29.11 — shabti The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This i...

sherlock

Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...

CVE-2025-59287-WSUS-2

CVE-2025-59287 ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2025-59287 is a critical remote code execution vulnerability in Microsoft Windows Server Update Services WSUS. It stems from unsafe deserializatio...

CVE-2025-25968

CVE-2025-25968: Vulnerabilidad de Control de Acceso Inadecuado en DDSN Interactive cm3 Acora CMS versión 10.1.1 DDSN Interactive cm3 Acora CMS versión 10.1.1 contiene una vulnerabilidad de control de acceso inadecuado. Un usuario con privilegios de editor puede acceder a información sensible, com...

Flowise-CVE-2025-58434-PasswordReset

CVE-2025-58434 — Flowise AI Unauthenticated Password Reset Overview CVE ID: CVE-2025-58434 Affected Software: Flowise AI Vulnerable Versions: = 3.0.5 Fixed Version: 3.0.6 and later Severity: Critical Author: arensballiu Date: 2025 Description Flowise AI versions up to and including 3.0.5 contain ...

TeamViewer-dumper-in-CPP

TeamViewer-dumper-in-CPP 実行中の TeamViewer インスタンスの子ウィンドウを列挙することで、TeamViewer の ID、パスワード、およびアカウント設定をダンプします。 コンパイルと要件 1. CL でコンパイルする 2. cl TeamViewerDump.cpp 3. または cl TeamViewerDump.cpp /EHsc 4. 要件 5. TeamViewer が実行中であること 6. TeamViewer の英語 GUI でのみテスト済み 出力例 root@kitploit:...

CVE-2023-7028

CVE-2023-7028 Exploit - Vulnerabilidad de Envenenamiento de Restablecimiento de Contraseña de GitLab Descripción general Este repositorio contiene un exploit para CVE-2023-7028 , una vulnerabilidad crítica en GitLab que permite a un atacante abusar de la funcionalidad de restablecimiento de...

gcp_scanner

면책 조항 이 프로젝트는 공식 Google 프로젝트가 아닙니다. Google에서 지원하지 않으며 Google은 특히 이 프로젝트의 품질, 상업성 또는 특정 목적에의 적합성에 대한 모든 보증을 부인합니다. GCP 스캐너 이것은 특정 자격 증명이 GCP에서 어떤 수준의 액세스 권한을 가지고 있는지 확인하는 데 도움을 주는 GCP 리소스 스캐너입니다. 이 스캐너는 보안 엔지니어가 특정 VM/컨테이너 손상, GCP 서비스 계정 또는 OAuth2 토큰 키 유출의 영향을 평가하는 데 도움이 되도록 설계되었습니다. 현재 스캐너는 다음 GC...

CVE-2025-25967

CVE-2025-25967: Falsificación de Petición en Sitios Cruzados CSRF DDSN Interactive cm3 Acora CMS versión 10.1.1 es vulnerable a la Falsificación de Petición en Sitios Cruzados CSRF. Esta falla permite a los atacantes engañar a usuarios autenticados para que realicen acciones no autorizadas, como ...

Azure-AD-Password-Checker

Azure AD Password Checker In an Azure AD environment, it's possible to determine whether a user has Multi-Factor Authentication MFA disabled without requiring any special privileges. This can be accomplished by analyzing the account's creation date and last password change date. If an account's...

weaponised-XSS-payloads

Weaponised XSS Payloads XSS payloads designed to turn alert1 into P1. The Blog Post This repo was released alongside a blogpost titled "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 What is this? In this reposito...