statiStrings

statiStrings root@kitploit: | | | | || | / | / | | \ | | '| | ' \ / / | \ \ || | | || | | || | | | | | | | \ \ |/\,|||/ || ||| ||, |/ |/ YARA Rule Strings Statistics Calculator Shelly Raban Sh3llyR, February 2021, Version 0.1 جدول المحتويات 1. حول المشروع بُني باستخدام 2. البدء التثبيت 3...

OWASP-Calculator

حاسبة تقييم المخاطر وفق OWASP 🧮 آلة حاسبة على الإنترنت لتقييم مخاطر الثغرات في الويب بناءً على تقييم مخاطر OWASP. انتقل إلى الآلة الحاسبة على الإنترنت صُنِعَ بـ ❤️ في إسبانيا...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Preuve de concept Follina Hébergez exploit.html sur localhost, port 80. Ouvrez le docx pour lancer calc. Pour modifier l'adresse distante à laquelle le document pointe, ouvrez-le avec 7-Zip et modifiez word\rels\document.xml.rels pour pointer vers un nouvel...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header root@kitploit: spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" build root@kitploit: wget...

CVE-2025-55182

简体中文 | English これはCVE-2025-55182脆弱性の分析、検証環境、およびPOCに関するリポジトリです。 脆弱性を学ぶ 《CVE-2025-55182 Analysis.md》の記事を参照してください。 脆弱性を検証する テスト環境またはデバッグ環境を構築した後、スクリプトpoc.pyを実行します。電卓がポップアップ表示された場合、脆弱性の悪用が成功したことを意味します。 root@kitploit: python poc.py...

CVE-2018-4878

Échantillon CVE-2018-4878 Source de l'échantillon : https://github.com/brianwrf/CVE-2017-4878-Samples Rapport d'analyse : http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Source de l'exploit dans le script Python : https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py est le...

CVE-2018-0802_POC

CVE-2018-0802POC usage: cve-2018-0802poc.py -h -e EXECUTABLE -o OUTPUT L'échantillon .rtf exploite la vulnérabilité pour exécuter la calculatrice...

CVE-2018-14667

CVE-2018-14667 تفاصيل:https://xz.aliyun.com/t/3264 poc calcwindows：...

MAL-2026-14391 Malicious code in fund-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5f9f0536151a173aa211b9b5f2972e68aee3043132adccdb3695947b16672 Package declares a preinstall script node index.js that fires unconditionally on npm install. index.js reads installer-side identifiers via...

Oracle Essbase (August 2026 CSPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the August 2026 Critical Security Patch Update CSPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in Oracle Essbase component: Essbase Web Platform Apache HTTP Server. The...

CVE-2026-70688

Vulnerability in Oracle Essbase component: Calculator. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover o...

EUVD-2026-61643

Vulnerability in Oracle Essbase component: Calculator. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover o...

MAL-2026-12504 Malicious code in @cy4dev/cydemo-bg-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0e5eedb2c2a44513fd808788f02499f57e3c2877c4c69d8a84b0d4038d7fe0 @cy4dev/[email protected] ships a postinstall lifecycle script src/postinstall.js that runs at npm install time and invokes node:childprocess.exe...

CVE-2026-7753

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

EUVD-2026-53033

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

CVE-2026-7753 Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

CVE-2026-7753

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

CVE-2026-7753

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-14900

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the jstophp function. This is due to insufficient sanitization of the orderDetails.originalValue field, which is injected verbatim into a calculator formula...