CVE-2026-87831

CVE-2026-87831 affects the Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin in versions before 7.9.7 . The plugin does not properly validate attachment ownership before deletion, allowing any authenticated user (e.g., a customer) to delete arbitrary media attachments bel...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

mad-metasploit

Metasploitのカスタムモジュール、プラグイン、リソーススクリプト、そして素晴らしいMetasploitコレクション https://www.hahwul.com/p/mad-metasploit.html Awesome awesome.md を開く mad-metasploitをMetasploitフレームワークに追加 1. metasploit-frameworkディレクトリを設定...

CVE-2025-39601

🚨 CVE-2025-39601 - WordPress Custom CSS, JS & PHP プラグイン WordPress Custom CSS, JS & PHP plugin CSRF PoC - WordPress Custom CSS, JS & PHP plugin By : Nxploited | Khaled Alenazi input type="hidden" name...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

kubeeye

英語 | 中文 KubeEyeは、Kubernetes専用に設計されたクラウドネイティブクラスタ検査ツールであり、カスタムルールに基づいてKubernetesクラスタ内の問題やリスクを特定できます。 クイックスタート インストール Releasesからインストールパッケージをダウンロードしてください。これにはHelmチャート、デモルール、オフラインインストール用のイメージが含まれています。 root@kitploit: VERSION=v1.0.3 wget...

OpenNebula-CVE-2025-56534

OpenNebula-CVE-2025-56534 エクスプロイトタイトル : OpenNebula 6.10.0.1 - カスタム認証ドライバーにおける格納型XSS クロスサイトスクリプティング エクスプロイト作成者 : Mark Artamonov ベンダーホームページ : https://opennebula.io/ テスト済みバージョン : OpenNebula 6.10.0.1 影響を受けるバージョン : OpenNebula 概念実証 :...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

AFLplusplus

American Fuzzy Lop plus plus AFL++ 发布版本：5.03c GitHub 版本：5.03c 仓库： https://github.com/AFLplusplus/AFLplusplus AFL++ 由以下人员维护： Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder-" Eissfeldt [email protected]...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM クイックパッチ CVE 2021-44228。 概要 このツールはBIG-IPデバイスに接続し、CVE-2021-4428というカスタムシグネチャセットを作成し、すべてのポリシーにブロッキングモードで適用します。また、すべてのシグネチャを強制し、変更を適用します。BIG-IP ASM v15.xでテスト済みですが、v13.x/v14.x/v16.xでも動作すると思われます。 警告:...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 の Elementor カスタムスキン向けエクスプロイト。...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. id: CVE-2011-1669 info: name: WP Custom Pages 0.5.0.1 - Local File Inclusion LFI...

WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...