CVE-2026-93927 WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0...

CVE-2026-93929 WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16...

EUVD-2026-96204

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

CVE-2026-106606

The YITH WooCommerce Affiliates WordPress plugin (versions

CVE-2026-106606 WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

CVE-2021-29155

Ceci est le code de preuve de concept pour CVE-2021-29155. Le système de suivi de plage pour l'arithmétique des pointeurs dans le domaine spéculatif était insuffisant. Il était possible d'extraire des données du noyau via un canal auxiliaire. Ceci est une preuve de concept, vous pouvez lire jusqu...

CVE-2022-36804-MASS-RCE

CVE-2022-36804-POC Une vulnérabilité critique CVE-2022-36804 dans Atlassian Bitbucket Server et Data Center pourrait être exploitée par des attaquants non autorisés pour exécuter du code malveillant sur des instances vulnérables. versions affectées Toutes les versions de Bitbucket Server et Data...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

CVE-2026-15178

The Fluent Forms plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 6.2.5 . The root cause is the plugin's failure to properly verify if a user is authorized to perform specific actions. This flaw allows authenticated attackers with Custom-level acce...

CVE-2026-15178 Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access an...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py — это скрипт на Python, предназначенный для обнаружения конкретных уязвимостей в экземплярах ServiceNow и извлечения данных подключения к базе данных при обнаружении уязвимости. Этот инструмент особенно полезен для исследователей безопасности и специалистов по...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

spiderfoot

SpiderFoot est un outil d'automatisation du renseignement open source OSINT. Il s'intègre à pratiquement toutes les sources de données disponibles et utilise une gamme de méthodes pour l'analyse des données, rendant ces données faciles à naviguer. SpiderFoot dispose d'un serveur Web intégré pour...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden in...

LockBit-Tattoo

LockBit-Tattoo Electronic: ID: 272784 Присоединился: 20 июля 2022 г. Мужчина: BTC: 3HeNJmgecLNHEhVn3JMcboybTgiFx4DGe3 Медиа: photo2022-09-0822-15-38.jpg Женщина: BTC: 3HC5eCcYtW27jhD59mg4U3haWr36teiLXB Медиа: photo2022-09-1101-07-49.jpg photo2022-09-1101-07-54.jpg DegB2W: ID: 272203 Присоединился...

sift

Sift Secrets Триаж утечек учётных данных и чувствительной информации для файловых ресурсов. Когда появляется открытый файловый ресурс, вопрос никогда не звучит как «есть ли в этом репозитории утёкший ключ». Он звучит так: «что именно оказалось раскрыто, и что мне нужно отозвать до конца рабочего...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

zannotate

ZAnnotate ZAnnotate est un utilitaire Go qui facilite l'annotation de grands ensembles d'adresses IP avec des métadonnées réseau. Actuellement, cela inclut : CLI Flag| Description| Nécessite une clé API| Nécessite un téléchargement de données ---|---|---|--- --censys| Renseignement internet Censy...

CVE-2026-91862

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-image-points' parameter in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14877

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...