CVE-2024-12157

CVE-2024-12157 Popup – MailChimp, GetResponse and ActiveCampaign Intergrations = 3.2.6 - Inyección SQL no autenticada Descripción El plugin Popup – MailChimp, GetResponse and ActiveCampaign Intergrations para WordPress es vulnerable a Inyección SQL a través del parámetro 'id' de la acción AJAX...

CVE-2024-55982

CVE-2024-55982 Share Buttons – Social Media = 1.0.2 - Inyección SQL no autenticada Descripción El plugin Share Buttons – Social Media para WordPress es vulnerable a Inyección SQL en las versiones hasta la 1.0.2 incluida, debido a un escape insuficiente del parámetro proporcionado por el usuario y...

CVE-2024-55978

CVE-2024-55978 Code Generator Pro = 1.2 - Inyección SQL no autenticada Descripción El plugin Code Generator Pro para WordPress es vulnerable a la inyección SQL en versiones hasta la 1.2, inclusive, debido a un escape insuficiente del parámetro proporcionado por el usuario y a la falta de...

CVE-2024-55972

CVE-2024-55972 eTemplates = 0.2.1 - Inyección SQL no autenticada Descripción El plugin eTemplates para WordPress es vulnerable a la inyección SQL en versiones hasta la 0.2.1 inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación...

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

Bugs-feed

Bug's feed Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities... It's implemented as a PWA application so you can get rid of the explorer and use it as a desktop application. Navigate through different tabs and take a look to the latest bug...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

exploitdb

New repo can be found here: https://gitlab.com/exploit-database/exploitdb...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

DOGE

DOGE Darknet Osint Graph Explorer Still in dev, works right. You should use this in addtion to Darknet OSINT Transform Pay attention here Query prototype: SELECT DISTINCT customcolumnname AS input, anothercustomname AS output FROM sometable, obviously you can add other options as WHERE, ORDER BY,...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gai...

firebase

firebase Exploiting vulnerable/misconfigured Firebase databases Disclaimer: The provided software is meant for educational purposes only. Use this at your own discretion, the creator cannot be held responsible for any damages caused. Please, use responsibly! Prerequisites Non-standard python...

ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

web2py-e94946d-CVE-2016-3957

Léame web2py es un framework de pila completa gratuito y de código abierto para el desarrollo rápido de aplicaciones web basadas en bases de datos, rápidas, escalables, seguras y portátiles. Está escrito y es programable en Python. Licencia LGPLv3 Obtén más información en http://web2py.com...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Descripción general CVE-2026-26980 es una vulnerabilidad de inyección SQL no autenticada en TryGhost Ghost CMS Content API. La ruta...

CVE-2025-46171

vBulletin 3.x.x - 通过好友列表过载导致的拒绝服务攻击 摘要 /misc.php?do=buddylist 端点执行一个单一的、大型 JOIN 查询，该查询检索所有好友及其用户和会话信息，以检查在线状态。由于该查询没有分页或结果限制地处理整个好友列表，因此当列表增大时，它会变得极其消耗资源，并可能使数据库过载。 此问题易于利用，且设置要求最低。除了基本用户帐户之外，不需要任何特殊权限。只需膨胀好友列表，就足以给数据库带来严重压力。 受影响版本 ✅ 确认存在漏洞 : vBulletin 3.8.7 技术细节 此 SQL...

PT-2026-104126

Name of the Vulnerable Software and Affected Versions Dc Woocommerce Multi Vendor versions prior to 5.0.19 Description An issue exists where authenticated attackers with vendor-level access or higher specifically those with the edit stores capability can perform SQL Injection. This occurs because...

openSUSE 16 Security Update : python-pymongo (openSUSE-SU-2026:22003-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22003-1 advisory. Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds ...