Rabbit Hole

개요 Rabbit Hole은 Maltego 기능의 매우 제한된 하위 집합을 제공하며, 침투 테스트를 위한 정보의 시각적 표현을 만드는 데 초점을 맞춥니다. IP 주소, 포트, 서비스 등 다양한 유형의 노드와 노드 간의 링크를 생성할 수 있으며, 훨씬 더 직관적인 인터페이스를 제공하고 등록이 필요하지 않습니다. 이 도구는 Hack The Box의 다양한 머신을 공략할 때 정보를 정리하는 데 도움을 주기 위해 개인적으로 만든 도구이며, 다른 사람들의 삶을 더 편리하게 만들 수 있기를 바라며 공유합니다. 소스 코드로부터 빌드하기...

CVE-2025-50754-PoC

CVE-2025-50754 Хранимая XSS, приводящая к удаленному выполнению кода в PHP-CMS Сводка PHP-система управления контентом версия 5 содержит уязвимость хранимого межсайтового скриптинга XSS в функции «Report». Когда администратор просматривает отправленный пользователем отчет, вредоносный JavaScript...

CVE-2026-81272

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

CVE-2026-78271

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

CVE-2026-78274

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

PoC-Simulator_CVE-2026-27778

PoC-SimulatorCVE-2026-27778 StackBlitz 차세대 에디터에서 편집 ⚡️...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Subida de archivos arbitrarios sin autenticación Descripción: El plugin Wux Blog Editor para WordPress es vulnerable a subidas de archivos arbitrarios debido a una validación insuficiente del tipo de archivo en la función 'wuxbtinsertImageNew' en versiones...

CVE-2026-81272 WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

EUVD-2026-66950

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

CVE-2026-81272

CVE-2026-81272 affects the WordPress FluentPlayer Pro plugin in versions 1.3.2 and below , where an Editor-level Broken Access Control flaw allows a user with the Editor role to perform actions they should not be permitted to. The CVSS 3.1 score is 4.9 (MEDIUM) with the vector AV:N/AC:L/PR:H/UI:N...

CVE-2026-78276

CVE-2026-78276 affects the WordPress Fluent Boards Pro plugin, versions 2.0.11 and earlier , where an Editor-level user can perform PHP Object Injection , leading to potential high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.2 / HIGH ). The vulnerability is network-re...

CVE-2026-78275

This Arbitrary File Deletion vulnerability affects the WordPress Fluent Boards Pro plugin in versions ≤ 2.0.11 . The flaw requires an authenticated user with Editor privileges and is scored CVSS 6.8 (Medium) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, indicating a high availability impa...

CVE-2026-78274 WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

EUVD-2026-66937

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78274

CVE-2026-78274 affects the WordPress Fluent Boards Pro plugin in versions

EUVD-2026-66935

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

CVE-2026-78271

CVE-2026-78271 is an Editor Privilege Escalation vulnerability in the WordPress FluentCRM Pro plugin, affecting versions 3.1.12 and earlier . The flaw was discovered by Ananda Dhakal via Patchstack. It allows an authenticated user with the Editor role to escalate privileges, rated CVSS 7.2 (HIGH)...

CVE-2026-78271 WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

dnSpy

dnSpyEx dnSpyEx — неофициальное продолжение проекта dnSpy, который представляет собой отладчик и редактор сборок .NET. Вы можете использовать его для редактирования и отладки сборок, даже если у вас нет исходного кода. Основные возможности: Отладка сборок .NET и Unity Редактирование сборок .NET и...

WordPress AI Engine plugin < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability

Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.4...