CVE-2026-81929

The Ocean Pro Demos (versions up to and including 1.5.4 ) and Ocean eComm Treasure Box (versions up to and including 1.8.0 ) WordPress plugins are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient authorization, input sanitization, and output escaping within the Pop...

skyvern

🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉 Skyvern automates browser-based workflows using LLMs and computer vision. It provides a Playwright-compatible SDK that adds AI functionality on top of playwright, as well as a no-code workflow builder to help both technical and...

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

paradoxiaRAT

Paradoxia Remote Access Tool. Are you looking for a GUI alternative? Check outRemote Hacker Probe. More Advanced and Stable with ton of features. Features Paradoxia Console Feature| Description ---|--- Easy to use| Paradoxia is extremely easy to use, So far the easiest rat! Root Shell| - Automati...

isms-builder

ISMS Builder Sistema de Gestión de Seguridad de la Información autoalojado — código abierto, sin necesidad de nube 📖 Wiki — Uso de la imagen Docker y variables de entorno, arquitectura y módulos, FAQ, contribuir DE/EN ⚠️ Advertencia de seguridad: repositorios falsos y copias que distribuyen malwar...

kali-cloud

Script de compilación de Kali-Cloud Generador de imágenes cloud de Kali Linux medianteFAI Fully Automatic Installation, bifurcado de Debian Cloud Images. Estos son los mismos scripts de compilación que el equipo de Kali utiliza para generar las imágenes cloud oficiales de Kali Linux, disponibles ...

CVE-2026-12227-visualcomposer-lfi-poc

CVE-2026-12227 - Visual Composer Unauthenticated LFI via vcv-template Validation Lab Security-research material for reproducing and validating CVE-2026-12227 : an unauthenticated local file inclusion in Visual Composer Website Builder's page-template resolution CVSS 3.1 9.8, plus a verified...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 About SecureWithUmer/Exploit-Index is the world's premier, zero-API aggregat...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Herramienta masiva automática para comprobar la vulnerabilidad en CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Instalar JQ Linux : comando apt-get install jq -y Windows...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

goodoldsearch-oss

Good Old Search Construye consultas de búsqueda precisas con frases exactas, filtros de sitio, exclusiones, rangos de fechas, tipos de archivo y enlaces de un solo clic en motores de búsqueda y objetivos de búsqueda vertical. Esto no es un motor de búsqueda, agregador de metabúsqueda, raspador o...

CVE-2023-38831-winrar

Constructor CVE-2023-38831 Constructor rápido de exploits para CVE-2023-38831, una vulnerabilidad que afecta a las versiones de WinRAR anteriores a la 6.23. Creé este constructor de exploits principalmente para aprender el lenguaje Rust, así que no esperes encontrar código limpio y optimizado...

EVCer

EVCer | CVE-2023-0159 - Extensive VC Addons para WPBakery page builder Herramienta automática masiva para comprobar vulnerabilidad en CVE-2023-0159 - Extensive VC Addons para WPBakery page builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - Restablecimiento de contraseña arbitrario sin autenticación CVE-2025-15030 User Profile Builder — Restablecimiento de contraseña sin autenticación → Toma de control de administrador + Subida de shell / / \ |/ / / / / / \ / / / \ / \ | / | | //|...

pydictor

pydictor README.md中文版 pydictor —— A powerful and useful hacker dictionary builder for a brute-force attack | | | | ' | | | |/ | |/ | / | '| | | | || | | | | | || | | | ./ , |,|||\/|| || |/ Email: [email protected] Preface： Q: Why I need to use pydictor ? A: 1.it always can help you You...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

WSL_Payload_Builder

WSL Payload Builder Aviso legal Esta herramienta está pensada para la investigación legítima de seguridad y las pruebas de penetración. Los usuarios son responsables de asegurarse de contar con la autorización adecuada antes de probar sistemas que no poseen o para los que no tienen permiso...

CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - SSRF no autenticado Descripción Fusion Builder es un plugin de WordPress que permite a los usuarios crear y editar páginas mediante una interfaz de arrastrar y soltar. Es vulnerable a un SSRF no autenticado que permite a un atacante leer cualquier archivo de...